Microsoft Security Advisory (2501696): Vulnerability in MHTML Could Allow Information Disclosure

Sponsored Content

Special Forums Windows & DOS: Issues & Discussions Security Advisories (RSS) - Microsoft Microsoft Security Advisory (2501696): Vulnerability in MHTML Could Allow Information Disclosure - 3 Post 302503806 by Linux Bot on Friday 11th of March 2011 06:00:02 PM

03-11-2011

Registered User

Microsoft Security Advisory (2501696): Vulnerability in MHTML Could Allow Information Disclosure - 3

Revision Note: V1.1 (March 11, 2011): Revised Executive Summary to reflect investigation of limited, targeted attacks. Advisory Summary:Microsoft is investigating new public reports of a vulnerability in all supported editions of Microsoft Windows. The vulnerability could allow an attacker to cause a victim to run malicious scripts when visiting various Web sites, resulting in information disclosure. This impact is similar to server-side cross-site scripting (XSS) vulnerabilities. Microsoft is aware of published information and proof-of-concept code that attempts to exploit this vulnerability. In addition, at this time, Microsoft is aware of public proof-of-concept code being used in limited, targeted attacks. Users who have applied the automated Microsoft Fix it solution described in Microsoft Knowledge Base Article 2501696 or manually applied the "Enable the MHTML protocol lockdown" workaround described in this advisory to their systems are not exposed to this vulnerability.

More...

Linux Bot

View Public Profile for Linux Bot

Find all posts by Linux Bot

LEARN ABOUT DEBIAN

pacparser_enable_microsoft_extensions

pacparser_enable_microsoft_extensions(3)		     Library Functions Manual			  pacparser_enable_microsoft_extensions(3)

NAME

       pacparser_enable_microsoft_extensions - Enable Microsoft PAC extensions.

SYNOPSIS

       #include <pacparser.h>

       void pacparser_enable_microsoft_extensions(void);

DESCRIPTION

       Enables	a  subset of Microsoft PAC extensions - dnsResolveEx, myIpAddressEx, isResolvableEx. These functions are used by Google Chrome and
       IE to work with IPv6. More info: http://code.google.com/p/pacparser/issues/detail?id=4.

SEE ALSO

       pacparser_version(3),   pacparser_init(3),   pacparser_parse_pac_file(3),   pacparser_parse_pac_string(3),   pacparser_parse_pac(3),   pac-
       parser_find_proxy(3), pacparser_just_find_proxy(3), pacparser_cleanup(3), pacparser_setmyip(3)

c2man pacparser.h						   14 March 2011			  pacparser_enable_microsoft_extensions(3)