• info
• discussion
• exploit
• solution
• references

Microsoft Internet Explorer Speech API 4 COM Object Instantiation Buffer Overflow Vulnerabilities

Solution:
Microsoft has released an advisory along with fixes to address these issues. Please see the references for more information.


Microsoft Internet Explorer 7.0

• Microsoft Cumulative Update for Internet Explorer 7 for Windows Server 2003 (KB933566)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=A074D9C0-1FED -4753-845E-073CFCE99F45


• Microsoft Cumulative Update for Internet Explorer 7 for Windows Server 2003 64-bit Itanium Edition (KB933566)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=77287386-48EB -4AA9-9537-626A3093AAF7&displaylang=en


• Microsoft Cumulative Update for Internet Explorer 7 for Windows Server 2003 x64 Edition (KB933566)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=69C526B8-8B07 -42BC-9BED-E18DEAE21C8E


• Microsoft Cumulative Update for Internet Explorer 7 for Windows XP Service Pack 2 (KB933566)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=C2191703-8CBD -4959-9F84-E13F21173926


• Microsoft Cumulative Update for Internet Explorer 7 in Windows Vista x64 Edition (KB933566)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=77287386-48EB -4AA9-9537-626A3093AAF7


• Microsoft Cumulative Update for Internet Explorer 7 for Windows XP x64 Edition (KB933566)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=69C526B8-8B07 -42BC-9BED-E18DEAE21C8E

Microsoft Internet Explorer 6.0 SP1

• Microsoft Cumulative Update for Internet Explorer 6 SP1 (KB933566)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=5C958650-28D2 -4DD0-96A8-DBFE79CE3F68


• Microsoft Cumulative Update for Internet Explorer for Windows Server 2003 (KB933566)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=7ED19127-5C2D -48E4-A8D1-090DC69FD68B


• Microsoft Cumulative Update for Internet Explorer for Windows Server 2003 64-bit Itanium Edition (KB933566)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=B628A3CC-A70C -478A-A10C-EEE254EE34AB


• Microsoft Cumulative Update for Internet Explorer for Windows XP Service Pack 2 (KB933566)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=60FB294E-A8E1 -405E-A289-2D2723EDF7EE


• Microsoft Cumulative Update for Internet Explorer for Windows XP x64 Edition (KB933566)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=086D6D6E-4703 -4C6C-A7AF-B6DAFEEEDE5D

Microsoft Internet Explorer 6.0

• Microsoft Cumulative Update for Internet Explorer for Windows Server 2003 (KB933566)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=7ED19127-5C2D -48E4-A8D1-090DC69FD68B


• Microsoft Cumulative Update for Internet Explorer for Windows Server 2003 64-bit Itanium Edition (KB933566)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=B628A3CC-A70C -478A-A10C-EEE254EE34AB


• Microsoft Cumulative Update for Internet Explorer for Windows XP x64 Edition (KB933566)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=086D6D6E-4703 -4C6C-A7AF-B6DAFEEEDE5D

Microsoft Internet Explorer 5.0.1 SP4

• Microsoft Cumulative Update for Internet Explorer 5.01 Service Pack 4 (KB933566)
  http://www.microsoft.com/downloads/details.aspx?FamilyId=3B49F1ED-ABE3 -4DBD-A91D-973415658F6B