04.102.2005 - MS05-020: Cumulative Security Update for Internet Explorer (890923)

DHTML Object Memory Corruption Vulnerability - CAN-2005-0553 A remote code execution vulnerability exists in Internet Explorer because of the way that it handles certain DHTML objects. An attacker could exploit the vulnerability by constructing a malicious Web page. This malicious Web page could allow remote code execution if a user visited a malicious Web site. An attacker who successfully exploited this vulnerability could take complete control of an affected system. URL Parsing Memory Corruption Vulnerability - CAN-2005-0554 A remote code execution vulnerability exists in Internet Explorer because of the way that it handles certain URLs. An attacker could exploit the vulnerability by constructing a malicious Web page. This malicious Web page could potentially allow remote code execution if a user visited a malicious Web site. An attacker who successfully exploited this vulnerability could take complete control of an affected system. Content Advisor Memory Corruption Vulnerability - CAN-2005-0555: A remote code execution vulnerability exists in Internet Explorer because of the way that it handles Content Advisor files. An attacker could exploit the vulnerability by constructing a specially crafted Content Advisor file. This malicious Content Advisor file could potentially allow remote code execution if a user visited a malicious Web site or viewed a malicious e-mail message and accepted the installation of the file. An attacker who successfully exploited this vulnerability could take complete control of an affected system. However, significant user interaction is required to exploit this vulnerability. - Download Internet Explorer 5.01 on Windows 2000 SP3 - Download Internet Explorer 5.01 on Windows 2000 SP4 - Download Internet Explorer 6 on Windows 2000 SP3/SP4 - Download Internet Explorer 6 on Windows XP SP1 - Download Internet Explorer 6 on Windows XP SP2 - Download Internet Explorer 6 on Windows XP 64-Bit Edition SP1 (Itanium) - Download Internet Explorer 6 on Windows Server 2003  - Download Internet Explorer 6 on Windows Server 2003 (Itanium) - Download Internet Explorer 6 on Windows XP 64-Bit Edition Version 2003 (Itanium) - View Microsoft Security Bulletin MS05-020 - View Microsoft Knowledge Base Article - 890923 - Visit Microsoft Corporation