• info
• discussion
• exploit
• solution
• references

Microsoft Internet Explorer 'toStaticHTML' HTML Sanitizing Information Disclosure Vulnerability

Solution:
Vendor updates are available. Please see the references for details.


Microsoft Internet Explorer 7.0

• Microsoft Cumulative Security Update for Internet Explorer 7 for Windows Server 2003 (KB2530548)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=26 241


• Microsoft Cumulative Security Update for Internet Explorer 7 for Windows Server 2003 64-bit Itanium Edition (K
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=26 239


• Microsoft Cumulative Security Update for Internet Explorer 7 for Windows Server 2003 x64 Edition (KB2530548)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=26 255


• Microsoft Cumulative Security Update for Internet Explorer 7 for Windows XP (KB2530548)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=26 264


• Microsoft Cumulative Security Update for Internet Explorer 7 for Windows XP x64 Edition (KB2530548)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=26 253


• Microsoft Cumulative Security Update for Internet Explorer 7 in Windows Server 2008 (KB2530548)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=26 254


• Microsoft Cumulative Security Update for Internet Explorer 7 in Windows Server 2008 for Itanium-based Systems
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=26 249


• Microsoft Cumulative Security Update for Internet Explorer 7 in Windows Server 2008 x64 Edition (KB2530548)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=26 267


• Microsoft Cumulative Security Update for Internet Explorer 7 in Windows Vista (KB2530548)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=26 240


• Microsoft Cumulative Security Update for Internet Explorer 7 in Windows Vista x64 Edition (KB2530548)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=26 260

Microsoft Internet Explorer 8

• Microsoft Cumulative Security Update for Internet Explorer 8 for Windows Server 2003 (KB2530548)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=26 250


• Microsoft Cumulative Security Update for Internet Explorer 8 for Windows Server 2003 x64 Edition (KB2530548)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=26 261


• Microsoft Cumulative Security Update for Internet Explorer 8 for Windows XP (KB2530548)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=26 249


• Microsoft Cumulative Security Update for Internet Explorer 8 for Windows XP x64 Edition (KB2530548)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=26 271


• Microsoft Cumulative Security Update for Internet Explorer 8 in Windows 7 (KB2530548)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=26 252


• Microsoft Cumulative Security Update for Internet Explorer 8 in Windows 7 x64 Edition (KB2530548)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=26 259


• Microsoft Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 (KB2530548)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=26 268


• Microsoft Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 R2 for Itanium-based Syste
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=26 258


• Microsoft Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 R2 x64 Edition (KB2530548)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=26 256


• Microsoft Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 x64 Edition (KB2530548)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=26 248


• Microsoft Cumulative Security Update for Internet Explorer 8 in Windows Vista x64 Edition (KB2530548)
  http://www.microsoft.com/download/en/details.aspx?displaylang=en&id=26 245