What is your take on the recent IE Problems

["Rob McShinsky" <Rob () McShinsky com>]

What do  you think are the real realworld possibilities of a problem?

(1) HIGH: Microsoft Internet Explorer Multiple Vulnerabilities

Affected Products:

Internet Explorer 6.0

Possibly Internet Explorer versions 5.01 and 5.5

Description:

Multiple new vulnerabilities have been reported in Internet Explorer which
can be exploited in tandem by a malicious website to execute arbitrary code
and/or access sensitive information on a system running a fully patched
browser (with the latest MS03-048 patch installed).

Technical details and proof-of-concept exploits have been posted.

Status: Vendor has not confirmed, no patch is available.

Council Site Actions:

Due to the late-breaking nature of this problem, we were unable to solicit
input from the council sites.

References:

Postings by Liu Die Yu (discovered the vulnerabilities)
http://archives.neohapsis.com/archives/fulldisclosure/2003-q4/2906.html

http://archives.neohapsis.com/archives/bugtraq/2003-11/0309.html

http://archives.neohapsis.com/archives/bugtraq/2003-11/0302.html

http://archives.neohapsis.com/archives/bugtraq/2003-11/0308.html

http://archives.neohapsis.com/archives/bugtraq/2003-11/0307.html

http://archives.neohapsis.com/archives/bugtraq/2003-11/0305.html

http://archives.neohapsis.com/archives/bugtraq/2003-11/0303.html

http://archives.neohapsis.com/archives/bugtraq/2003-11/0298.html

http://archives.neohapsis.com/archives/bugtraq/2003-11/0297.html

Secunia Advisory

http://www.secunia.com/advisories/10289/


---------------------------------------------------------------------------
----------------------------------------------------------------------------