-
February 1st, 2011 02:30 AM #1
- Join Date
- Oct 2009
- Location
- The land of Hockey and Rock music
- Posts
- 5,016
- Mentioned
- 16 Post(s)
- Tagged
- 434 Thread(s)
- Sex:
Microsoft Releases “Fix It” for MHTML Script Injection Vulne
Recently Microsoft released Security Advisory 2501696 to alert customers to a publicly disclosed vulnerability in the MHTML protocol handler. This vulnerability could allow attackers to construct malicious links pointing to HTML documents that, when clicked, would render the targeted document and reflected script in the security context of the user and target location. The end result of this type of vulnerability is script encoded within the link executed in the context of the target document or target web site.
By default, the MHTML protocol handler is vulnerable on Windows XP and all later supported Windows versions. Internet Explorer is an attack vector, but because this is a Windows vulnerability, the version of IE is not relevant.
To fix this vulnerability, download following "Fix it" solution to enable the Network Protocol Lockdown for mhtml: for all security zones
Download Link https://go.microsoft.com/?linkid=9760419
More Info https://blogs.technet.com/b/srd/archi...erability.aspx
Thread Information
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)
Similar Threads
-
Microsoft Releases Silverlight 5 Beta Version
By razorsedge in forum News & ReviewsReplies: 0Last Post: April 14th, 2011, 09:33 PM -
Microsoft releases Express Deployment Tool for OEMs
By razorsedge in forum Instalation TutorialsReplies: 0Last Post: March 1st, 2011, 06:27 AM -
Microsoft releases Internet Explorer 9 Release Candidate
By razorsedge in forum News & ReviewsReplies: 0Last Post: February 11th, 2011, 11:31 PM -
Expert: Apple is 10 years behind Microsoft in handling vulne
By razorsedge in forum News & ReviewsReplies: 1Last Post: August 11th, 2010, 02:59 PM
Hello, I am the author of NiwradSoft UXTheme Patcher, the old "Seven Remix XP" and "NiwradSoft Remix Pack," among others. I want to publish my programs. I am currently working on a new version of...
Hello world, I am...