Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: Microsoft Security Advisory (917077) - SANS Internet Storm Center SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms:

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Microsoft Security Advisory (917077)
Microsoft has just released a Security Advisory for the vulnerability in the way HTML Objects. This is the reason the Internet Storm Center went to yellow this evening. 

From the Microsoft advisory:

Microsoft has confirmed new public reports of a vulnerability in Microsoft Internet Explorer. Based on our investigation, this vulnerability could allow an attacker to execute arbitrary code on the user's system in the security context of the logged-on user. We have seen examples of proof of concept code but we are not aware of attacks that try to use the reported vulnerabilities or of customer impact at this time."

Microsoft Suggested Workarounds:
  • Configure Internet Explorer to prompt before running Active Scripting or disable Active Scripting in the Internet and Local intranet security zones.
  • Set Internet and Local intranet security zone settings to "high" to prompt before Active Scripting in these zones.

Microsoft says that they are still investigating and will provide more information as it becomes available.  So stay tuned for further updates.


279 Posts
ISC Handler
Mar 24th 2006

Sign Up for Free or Log In to start participating in the conversation!