• info
• discussion
• exploit
• solution
• references

Microsoft Internet Explorer URLMON Sniffing Cross Domain Information Disclosure Vulnerability

Solution:
Updates are available; please see the references for details.


Microsoft Internet Explorer 7.0

• Microsoft Cumulative Security Update for Internet Explorer 7 for Windows Server 2003 (KB982381)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=f0187b69-3ed9 -494c-89f1-90a35e22078c


• Microsoft Cumulative Security Update for Internet Explorer 7 for Windows Server 2003 64-bit Itanium Edition (K
  http://www.microsoft.com/downloads/details.aspx?FamilyID=123bf547-9005 -451f-9eba-97a68037304e


• Microsoft Cumulative Security Update for Internet Explorer 7 for Windows Server 2003 x64 Edition (KB982381)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=50b8ee2e-31f8 -473d-83d1-822c89c28070


• Microsoft Cumulative Security Update for Internet Explorer 7 for Windows XP (KB982381)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=fc02fc7e-ee85 -4377-b54c-012fa60a8c9c


• Microsoft Cumulative Security Update for Internet Explorer 7 for Windows XP x64 Edition (KB982381)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=6c7cda29-161e -49b4-976a-c718c0aa11a0


• Microsoft Cumulative Security Update for Internet Explorer 7 in Windows Server 2008 (KB982381)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=bed14484-7fc5 -455d-b996-3192467543cc


• Microsoft Cumulative Security Update for Internet Explorer 7 in Windows Server 2008 for Itanium-based Systems
  http://www.microsoft.com/downloads/details.aspx?FamilyID=dee5c0c0-b844 -490d-8daf-6e6ec8a39e35


• Microsoft Cumulative Security Update for Internet Explorer 7 in Windows Server 2008 x64 Edition (KB982381)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=a24554e8-213b -4c24-b062-ec424d64128e


• Microsoft Cumulative Security Update for Internet Explorer 7 in Windows Vista (KB982381)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=661c9528-917d -4df6-a330-c89f39dc5ce4


• Microsoft Cumulative Security Update for Internet Explorer 7 in Windows Vista x64 Edition (KB982381)
  http://www.microsoft.com/downloads/details.aspx?FamilyID=d9f5feb0-fa1a -40c1-9971-9b8af6f0b4a5

Microsoft Internet Explorer 8

• Microsoft Cumulative Security Update for Internet Explorer 8 for Windows Server 2003 (KB982381)
  http://www.microsoft.com/downloads/details.aspx?familyid=ebab6101-fcf1 -4842-b22d-893a20c1c10f


• Microsoft Cumulative Security Update for Internet Explorer 8 for Windows Server 2003 x64 Edition (KB982381)
  http://www.microsoft.com/downloads/details.aspx?familyid=87e13912-f861 -4985-ab9d-260a5898dfd4


• Microsoft Cumulative Security Update for Internet Explorer 8 for Windows XP (KB982381)
  http://www.microsoft.com/downloads/details.aspx?familyid=9cff9aba-7743 -4c33-87c7-37d06ed60a21


• Microsoft Cumulative Security Update for Internet Explorer 8 for Windows XP x64 Edition (KB982381)
  http://www.microsoft.com/downloads/details.aspx?familyid=37cd7533-ddad -4d0d-85c0-1491308e1ff8


• Microsoft Cumulative Security Update for Internet Explorer 8 in Windows 7 (KB982381)
  http://www.microsoft.com/downloads/details.aspx?familyid=5c835885-9375 -4882-a92f-4d4cfcacc005


• Microsoft Cumulative Security Update for Internet Explorer 8 in Windows 7 x64 Edition (KB982381)
  http://www.microsoft.com/downloads/details.aspx?familyid=5cfc5776-0c6b -4092-bc98-94df077c60d8


• Microsoft Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 (KB982381)
  http://www.microsoft.com/downloads/details.aspx?familyid=24ed08c7-a474 -4458-8269-3b9de5e22385


• Microsoft Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 R2 for Itanium-based Syste
  http://www.microsoft.com/downloads/details.aspx?familyid=52c04d85-911f -47be-852e-c9bb4934744d


• Microsoft Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 R2 x64 Edition (KB982381)
  http://www.microsoft.com/downloads/details.aspx?familyid=7c4ff5ae-eadd -431e-b982-d5f179efb8c0


• Microsoft Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 x64 Edition (KB982381)
  http://www.microsoft.com/downloads/details.aspx?familyid=cf84469b-ce6d -45e8-8336-7b4501c6cf91


• Microsoft Cumulative Security Update for Internet Explorer 8 in Windows Vista (KB982381)
  http://www.microsoft.com/downloads/details.aspx?familyid=640f9216-3e99 -46b6-aac8-cd051eedad3c


• Microsoft Cumulative Security Update for Internet Explorer 8 in Windows Vista x64 Edition (KB982381)
  http://www.microsoft.com/downloads/details.aspx?familyid=3076d1ea-7716 -4b54-8ec4-660374f14dcb