Internet Explorer Three Vulnerabilities

[Peaches]

Internet Explorer Three Vulnerabilities

Highly critical

release date: 2009-07-28

Three vulnerabilities have been reported in Internet Explorer, which can be exploited by malicious people to compromise a user's system.

1) An error when accessing deleted objects in memory can be exploited to corrupt memory via a specially crafted web page.

2) An error when handling table operations in specific situations can be exploited to corrupt memory via a specially crafted web page.

3) Another error when accessing deleted objects in memory can be exploited to corrupt memory via a specially crafted web page.

Successful exploitation of the vulnerabilities may allow execution of arbitrary code.

NOTE: This security update also implements defence-in-depth security measures to mitigate known attack vectors within Internet Explorer for vulnerabilities when reading persisted data in some components and ActiveX controls developed with certain versions of ATL.

Secunia advisories - http://secunia.com/advisories/35962/