• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Microsoft Internet Explorer OnUnload Javascript Browser Entrapment Vulnerability

Solution:
Microsoft has released an advisory along with fixes to address this issue. Please see the references for more information.


Microsoft Internet Explorer 6.0 SP1

• Microsoft Cumulative Security Update for Internet Explorer 6 SP1 (KB939653)
  Windows 2000 Service Pack 4
  http://www.microsoft.com/downloads/details.aspx?FamilyId=DF3BA596-7C5B -4151-9884-6957AA884AAB


• Microsoft Cumulative Security Update for Internet Explorer for Windows Server 2003 (KB939653)
  Windows Server 2003 Service Pack 1; Windows Server 2003 Service Pack 2
  http://www.microsoft.com/downloads/details.aspx?FamilyId=4AEFAA38-8757 -4E6E-8924-57CABD1C2FC3


• Microsoft Cumulative Security Update for Internet Explorer for Windows Server 2003 64-bit Itanium Edition (KB9
  Windows Server 2003 Service Pack 1 for Itanium-based Systems; Windows Server 2003 Service Pack 2 for Itanium-based Systems
  http://www.microsoft.com/downloads/details.aspx?FamilyId=309A8F10-C7EA -4961-A969-092B0C4D7BBC


• Microsoft Cumulative Security Update for Internet Explorer for Windows Server 2003 x64 Edition (KB939653)
  Windows Server 2003 Service Pack 1; Windows Server 2003 Service Pack 2 x64 Edition
  http://www.microsoft.com/downloads/details.aspx?FamilyId=88ABA9DD-653B -4CDF-A513-CCA32A7D7E41


• Microsoft Cumulative Security Update for Internet Explorer for Windows XP Service Pack 2 (KB939653)
  Windows XP Service Pack 2
  http://www.microsoft.com/downloads/details.aspx?FamilyId=513A8320-6D36 -4FC9-A38A-867192B55B53


• Microsoft Cumulative Security Update for Internet Explorer for Windows XP x64 Edition (KB939653)
  Windows XP Professional x64 Edition
  http://www.microsoft.com/downloads/details.aspx?FamilyId=AE8A26D8-1910 -4B8C-8A73-6E2FA6B5B29F

Microsoft Internet Explorer 7.0

• Microsoft Cumulative Security Update for Internet Explorer 7 for Windows Server 2003 (KB939653)
  Windows Server 2003 Service Pack 1; Windows Server 2003 Service Pack 2
  http://www.microsoft.com/downloads/details.aspx?FamilyId=0A31C451-32F4 -4551-AE45-D600F8B3B11B


• Microsoft Cumulative Security Update for Internet Explorer 7 for Windows Server 2003 64-bit Itanium Edition (K
  Windows Server 2003 Service Pack 1 for Itanium-based Systems; Windows Server 2003 Service Pack 2 for Itanium-based Systems
  http://www.microsoft.com/downloads/details.aspx?FamilyId=093A2250-3BE3 -494F-80E0-89CA7217030F


• Microsoft Cumulative Security Update for Internet Explorer 7 for Windows Server 2003 x64 Edition (KB939653)
  Windows Server 2003 Service Pack 1; Windows Server 2003 Service Pack 2 x64 Edition
  http://www.microsoft.com/downloads/details.aspx?FamilyId=C1915633-D181 -4CA1-A4F0-7CA0F865AA72


• Microsoft Cumulative Security Update for Internet Explorer 7 for Windows XP Service Pack 2 (KB939653)
  Windows XP Service Pack 2
  http://www.microsoft.com/downloads/details.aspx?FamilyId=4CA0AC93-BF51 -40FE-A1BA-CB3E0A36D8B5


• Microsoft Cumulative Security Update for Internet Explorer 7 for Windows XP x64 Edition (KB939653)
  Windows XP Professional x64 Edition
  http://www.microsoft.com/downloads/details.aspx?FamilyId=DBD284D0-2664 -42A4-AD16-A0535244C81C


• Microsoft Cumulative Security Update for Internet Explorer 7 in Windows Vista (KB939653)
  Windows Vista
  http://www.microsoft.com/downloads/details.aspx?FamilyId=86392E8D-098C -427F-A233-699CDB9375AE


• Microsoft Cumulative Security Update for Internet Explorer 7 in Windows Vista x64 Edition (KB939653)
  Windows Vista Business 64-bit edition; Windows Vista Enterprise 64-bit edition; Windows Vista Home Basic 64-bit edition; Windows Vista Home Premium 64-bit edition; Windows Vista Ultimate 64-bit edition
  http://www.microsoft.com/downloads/details.aspx?FamilyId=62490E6D-0A21 -4A15-90BD-63CA8F8886B6

Microsoft Internet Explorer 5.0.1 SP4

• Microsoft Cumulative Security Update for Internet Explorer 5.01 Service Pack 4 (KB939653)
  Windows 2000 Service Pack 4
  http://www.microsoft.com/downloads/details.aspx?FamilyId=95827F3F-A984 -4E34-A949-D16A0614121A