Microsoft Windows Knowledge Base Article 974455 update is not installed (WinMs09kb974455Update)

Microsoft Windows Knowledge Base Article 974455 update is not installed (WinMs09kb974455Update)

Vuln ID:	53544
Risk Level:	High	WinMs09kb974455Update
Platforms:	Microsoft Internet Explorer: 6.0, Microsoft Internet Explorer: 6.0 SP1, Microsoft Windows 2000: SP4, Microsoft Windows XP: SP2, Microsoft Internet Explorer: 7.0, Microsoft Windows Vista, Microsoft Windows Server 2003: SP2, Microsoft Windows Server 2003: SP2 Itanium, Microsoft Windows Server 2003: SP2 x64, Microsoft Windows Vista: x64, Microsoft Windows XP: SP2 x64 Professional, Microsoft Windows Vista: SP1, Microsoft Windows Vista: SP1 x64, Microsoft Internet Explorer: 5.0.1 SP4, Microsoft Internet Explorer: 8.0, Microsoft Windows Server 2008: Itanium, Microsoft Windows Server 2008: x32, Microsoft Windows Server 2008: x64, Microsoft Windows XP: SP3, Microsoft Windows Vista: SP2 x64, Microsoft Windows Vista: SP2, Microsoft Windows Server 2008: SP2 x32, Microsoft Windows Server 2008: SP2 x64, Microsoft Windows 7: x64, Microsoft Windows 7: x32, Microsoft Windows Server 2008: R2 x64, Microsoft Windows Server 2008: SP2 Itanium
Description:	Microsoft Windows Knowledge Base Article 974455 update is not installed on the system, which could allow an attacker to exploit the following vulnerabilities: Microsoft Internet Explorer could allow a remote attacker to execute arbitrary code on the system, caused by an error when processing data stream headers. By persuading a victim to visit a specially-crafted Web page, a remote attacker could exploit this vulnerability to corrupt memory and execute arbitrary code on the system with the privileges of the victim. Microsoft Internet Explorer could allow a remote attacker to execute arbitrary code on the system, caused by the improper validation of arguments under specific circumstances. By persuading a victim to visit a specially-crafted Web page, a remote attacker could exploit this vulnerability to execute arbitrary code on the system with the privileges of the victim. Microsoft Internet Explorer could allow a remote attacker to execute arbitrary code on the system, caused by an error when attempting to access a deleted or uninitialized object. By persuading a victim to visit a specially-crafted Web page, a remote attacker could exploit this vulnerability to corrupt memory and execute arbitrary code on the system with the privileges of the victim. Microsoft Internet Explorer could allow a remote attacker to execute arbitrary code on the system, caused by an error when attempting to access a deleted or uninitialized object. By persuading a victim to visit a specially-crafted Web page, a remote attacker could exploit this vulnerability to corrupt memory and execute arbitrary code on the system with the privileges of the victim.
Remedy:	Apply the appropriate patch for your system, as listed in Microsoft Security Bulletin MS09-054. See References.
False Positives:
False Negatives:
Required Permission:	Windows login
Additional Information:
References:	Microsoft Security Bulletin MS09-054 Cumulative Security Update for Internet Explorer (974455) http://www.microsoft.com/technet/security/bulletin/ms09-054.mspx IBM Internet Security Systems X-Force Database Microsoft Internet Explorer data stream headers code execution http://xforce.iss.net/xforce/xfdb/53538 IBM Internet Security Systems X-Force Database Microsoft Internet Explorer arguments code execution http://xforce.iss.net/xforce/xfdb/53539 IBM Internet Security Systems X-Force Database Microsoft Internet Explorer uninitialized code execution http://xforce.iss.net/xforce/xfdb/53542 IBM Internet Security Systems X-Force Database Microsoft Internet Explorer uninitialized object code execution http://xforce.iss.net/xforce/xfdb/53543 ISS X-Force Microsoft Windows Knowledge Base Article 974455 update is not installed http://www.iss.net/security_center/static/53544.php CVE CVE-2009-2531 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2531 CVE CVE-2009-2530 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2530 CVE CVE-2009-1547 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1547 CVE CVE-2009-2529 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-2529

Know Your Risks

Common Vulnerabilties & Exposures