MS11-050: Cumulative Security Update for Internet Explorer: June 14, 2011

2011-06-1400:00:00

Microsoft

support.microsoft.com

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

JSON

<html><body><p>Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted Web page using Internet Explorer.</p><h2></h2><div>The update that this article describes has been replaced by a newer update. To resolve this problem, install the most current cumulative security update for Internet Explorer. To install the most current update, visit the following Microsoft website:<div><a href=“http://www.microsoft.com/technet/security/current.aspx” target=“_self”>http://www.microsoft.com/technet/security/current.aspx</a><a href=“http://windowsupdate.microsoft.com” target=“_self”>http://windowsupdate.microsoft.com</a></div>For more technical information about the most current cumulative security update for Internet Explorer, visit the following Microsoft website:<div><a href=“http://www.microsoft.com/technet/security/current.aspx” target=“_self”>http://www.microsoft.com/technet/security/current.aspx</a></div></div><h2>INTRODUCTION</h2><div>Microsoft has released security bulletin MS11-050. To view the complete security bulletin, visit one of the following Microsoft websites:<br /><ul><li>Home users:<br /><div><a href=“http://www.microsoft.com/security/pc-security/bulletins/201106.aspx” target=“_self”>http://www.microsoft.com/security/pc-security/bulletins/201106.aspx</a></div><span>Skip the details</span>: Download the updates for your home computer or laptop from the Microsoft Update Web site now:<br /><div><a href=“http://update.microsoft.com/microsoftupdate/” target=“_self”>http://update.microsoft.com/microsoftupdate/</a></div></li><li>IT professionals:<br /><div><a href=“http://www.microsoft.com/technet/security/bulletin/ms11-050.mspx” target=“_self”>http://www.microsoft.com/technet/security/bulletin/MS11-050.mspx</a></div></li></ul><span><h3>How to obtain help and support for this security update</h3> <br />Help installing updates: <br /><a href=“https://support.microsoft.com/ph/6527” target=“_self”>Support for Microsoft Update</a><br /><br />Security solutions for IT professionals: <br /><a href=“http://technet.microsoft.com/security/bb980617.aspx” target=“_self”>TechNet Security Troubleshooting and Support</a><br /><br />Help protect your computer that is running Windows from viruses and malware:<br /><a href=“https://support.microsoft.com/contactus/cu_sc_virsec_master” target=“_self”>Virus Solution and Security Center</a><br /><br />Local support according to your country: <br /><a href=“https://support.microsoft.com/common/international.aspx” target=“_self”>International Support</a><br /><br /></span></div><h2>More Information</h2><div><h3>Non-security-related fixes that are included in this security update</h3><h4>General distribution release (GDR) fixes</h4>Individual updates may not be installed, depending on the version of Windows and the version of the affected application. Please view the individual articles to determine your update status.<br /> <br /><div><table><tr><th>Article number</th><th>Article title</th></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2534409”>2534409 </a></td><td>A webpage stops responding after you close a modal dialog box that is started by a VB6 ActiveX control in Internet Explorer 9 </td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2539352”>2539352 </a></td><td>Memory leak when the window.createPopup method and the document.createStyleSheet method are used in Internet Explorer 7 or in Internet Explorer 8 </td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2555207”>2555207 </a></td><td>Tasks may not be displayed in the Jump List of a pinned Internet Explorer 9 icon in Windows 7 or in Windows Server 2008 R2 </td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2556260”>2556260 </a></td><td>You cannot edit a cell in a DHMTL grid after you delete the cell’s contents in Windows Internet Explorer 8 on a computer that is running Windows Vista or Windows Server 2008 </td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2566263”>2566263 </a></td><td>A warning message unexpectedly appears when you try to download a file in Internet Explorer 9: “This type of file could harm your computer”</td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2566258”>2566258 </a></td><td>The download process stops at 99 percent when you try to download a file in Internet Explorer 9</td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2566149”>2566149 </a></td><td>You cannot resize the address bar in a Hebrew version of Internet Explorer 9</td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2565653”>2565653 </a></td><td>Internet Explorer 9 crashes on a computer that has iMesh or an NVidia graphics driver installed</td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2565609”>2565609 </a></td><td>Internet Explorer 9 hardware acceleration may not work in some virtualization environments</td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2565080”>2565080 </a></td><td>The origin property change event does not occur in Internet Explorer 9 when the background-origin is changed through the background shorthand property </td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2565076”>2565076 </a></td><td>The background shorthand property does not return an empty string when you view a webpage in Internet Explorer 9</td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2564594”>2564594 </a></td><td>The gradient of an SVG graphic stretches non-uniformly when you view the webpage in Internet Explorer 9</td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2555751”>2555751 </a></td><td>The Function constructor produces an error in Internet Explorer 9 Standards mode</td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2555542”>2555542 </a></td><td>How to enable Internet Explorer 9 to use top-level domains to perform Pinned Site domain checks on SiteMode APIs and on Task definitions</td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2554852”>2554852 </a></td><td>The font size of an input field or of a text box is smaller than expected in Internet Explorer 8 or in Internet Explorer 9</td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2554771”>2554771 </a></td><td>Some table cells may not be displayed in Internet Explorer 8 and in Internet Explorer 9 when the table contains several columns that contain different colspan attributes</td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2526430”>2526430 </a></td><td>Internet Explorer 8 does not respect the Security Features Group Policy settings</td></tr></table></div></div><h2></h2><div><h4>Hotfixes</h4>Security update 2530548 packages for Windows XP and for Windows Server 2003 include Internet Explorer hotfix files and general distribution release (GDR) files. If no existing Internet Explorer files are from the hotfix environment, security update 2530548 installs the GDR files. <br /><br />Hotfixes are intended to correct only the problems that are described in the Microsoft Knowledge Base articles that are associated with the hotfixes. Apply hotfixes only to systems that are experiencing these specific problems. <br /><br />These hotfixes may receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next service pack that contains these hotfixes. <span>For more information about how to install the hotfixes that are included in security update 2530548, click the following article number to view the article in the Microsoft Knowledge Base:<br /><div><a href=“https://support.microsoft.com/en-us/help/897225”>897225 </a>How to install hotfixes that are included in cumulative security updates for Internet Explorer </div></span><br /><span>Note</span>In addition to installing hotfix files, review the Microsoft Knowledge Base article that is associated with the specific hotfix that you have to install to determine the registry modification that is required to enable that specific hotfix. <br /><br /><span>For more information about how to determine whether your existing Internet Explorer files are from the hotfix or from the GDR environment, click the following article number to view the article in the Microsoft Knowledge Base:<br /><div><a href=“https://support.microsoft.com/en-us/help/824994”>824994 </a>Description of the contents of Windows XP Service Pack 2 and Windows Server 2003 software update packages </div></span></div><h2>FILE INFORMATION</h2><div><a></a><br /><br />For a list of files that are provided within these packages, click the following link: <br /><br /><div><a href=“http://download.microsoft.com/download/9/d/3/9d3d64e2-b848-49c1-8314-e15fe349e465/file attributes tables for security update 2530548.csv” target=“_self”>File attributes tables for security update 2530548.csv</a></div><h3>How to determine whether you are running a 32-bit or a 64-bit edition of Windows</h3>If you are not sure which version of Windows that you are running or whether it is a 32-bit version or 64-bit version, open System Information (Msinfo32.exe), and review the value that is listed for <strong>System Type</strong>. To do this, follow these steps:<br /><ol><li>Click <strong>Start</strong>, and then click <strong>Run</strong>, or click <strong>Start Search</strong>. </li><li>Type <strong>msinfo32.exe</strong> and then press ENTER. </li><li>In <strong>System Information</strong>, review the value for <strong>System Type</strong>.<br /><ul><li>For 32-bit editions of Windows, the <strong>System Type</strong> value is <strong>x86-based PC</strong>. </li><li>For 64-bit editions of Windows, the <strong>System Type</strong> value is <strong>x64-based PC</strong>. </li></ul></li></ol><span>For more information about how to determine whether you are running a 32-bit or 64-bit edition of Windows, click the following article number to view the article in the Microsoft Knowledge Base:<br /><div><a href=“https://support.microsoft.com/en-us/help/827218”>827218 </a>How to determine whether a computer is running a 32-bit version or a 64-bit version of the Windows operating system</div></span></div></body></html>