MicrosoftKB2586448MS11-081: Cumulative Security Update for Internet Explorer: October 11, 2011
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
<html><body><p>Resolves vulnerabilities in Internet Explorer that could allow remote code execution if a user views a specially crafted webpage by using Internet Explorer.</p><h2>Notice</h2><div> <br />The update that this article describes has been replaced by a newer update. To resolve this problem, install the most current cumulative security update for Internet Explorer. To install the most current update, visit the following Microsoft website:<br /> <div><a href=“http://update.microsoft.com/microsoftupdate” target=“_self”>http://update.microsoft.com/microsoftupdate</a><br /></div> <br /> <br />For more technical information about the most current cumulative security update for Internet Explorer, visit the following Microsoft website:<br /><div><a href=“http://www.microsoft.com/technet/security/current.aspx” target=“_self”>http://www.microsoft.com/technet/security/current.aspx</a><br /></div></div><h2>Introduction</h2><div>Microsoft has released security bulletin MS11-081. To view the complete security bulletin, visit one of the following Microsoft websites: <ul><li>Home users:<br /><div><a href=“http://www.microsoft.com/security/pc-security/bulletins/201110.aspx” target=“_self”>http://www.microsoft.com/security/pc-security/bulletins/201110.aspx</a></div><span>Skip the details</span>: Download the updates for your home computer or for your laptop from the Microsoft Update Website now: <div><a href=“http://update.microsoft.com/microsoftupdate” target=“_self”>http://update.microsoft.com/microsoftupdate</a></div></li><li>IT professionals:<br /><div><a href=“http://technet.microsoft.com/security/bulletin/ms11-081” target=“_self”>http://technet.microsoft.com/security/bulletin/MS11-081</a></div></li></ul><span><h3>How to obtain help and support for this security update</h3> <br />Help installing updates: <br /><a href=“https://support.microsoft.com/ph/6527” target=“_self”>Support for Microsoft Update</a><br /><br />Security solutions for IT professionals: <br /><a href=“http://technet.microsoft.com/security/bb980617.aspx” target=“_self”>TechNet Security Troubleshooting and Support</a><br /><br />Help protect your computer that is running Windows from viruses and malware:<br /><a href=“https://support.microsoft.com/contactus/cu_sc_virsec_master” target=“_self”>Virus Solution and Security Center</a><br /><br />Local support according to your country: <br /><a href=“https://support.microsoft.com/common/international.aspx” target=“_self”>International Support</a><br /><br /></span></div><h2>More Information</h2><div><h3>Known issues with this security update</h3>After you install this security update, some drop-down lists and combo boxes do not appear in Internet Explorer 7.<br /><br />If a webpage hosts another webpage that is in a different domain, and the hosted webpage has window restrictions enabled (default configuration) and contains a select control such as list or combo box when the hosting page tries to display the combo box or drop-down value from the hosted page, the combo box or list is not displayed.<br /><br />For more information about this problem, click the following article number to view the article in the Microsoft Knowledge Base:<div><a href=“https://support.microsoft.com/en-us/help/2628724”>2628724 </a> Some drop-down lists and combo boxes do not appear in Internet Explorer 7 after you install security update 2586448</div><br /><br />To resolve this problem, install security update 2618444. For more information, click the following article number to view the article in the Microsoft Knowledge Base: <div><a href=“https://support.microsoft.com/en-us/help/2618444”>2618444 </a> <br />MS11-099: Cumulative Security Update for Internet Explorer: December 13, 2011<br /><br /></div><h3>Non-security-related fixes that are included in this security update</h3><h4>General distribution release (GDR) fixes</h4>Individual updates may not be installed, depending on the version of Windows and the version of the affected application. Please view the individual articles to determine your update status.<br /><div><table><tr><th>Article number</th><th>Article title</th></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2575790”>2575790 </a></td><td>Internet Explorer 9 displays a password mask character for Japanese characters that is too large for a password entry box</td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2607445”>2607445 </a></td><td>Download content is lost after you click the gold information bar to confirm a file download in Internet Explorer 8</td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2601307”>2601307 </a></td><td>Navigation fails when you click a link that uses a custom pluggable protocol to browse to a secure site in Internet Explorer 9</td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2601254”>2601254 </a></td><td>The IHTMLEventObj::put_keyCode property does not work in Internet Explorer 9 Standards mode</td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2601253”>2601253 </a></td><td>You cannot change the font size in Windows Live Mail or in Windows Mail after you install Internet Explorer 9</td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2600932”>2600932 </a></td><td>An application that uses the web browser control in Internet Explorer may crash</td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2534550”>2534550 </a></td><td>The window.createPopup method to create a modal window does not work with protected mode enabled in Internet Explorer 8</td></tr><tr><td><a href=“https://support.microsoft.com/en-us/help/2515657”>2515657 </a></td><td>Windows 7 gadgets may not work or be displayed correctly</td></tr></table></div><h4>Hotfixes</h4>Security update 2586448 packages for Windows XP and for Windows Server 2003 include Internet Explorer hotfix files and general distribution release (GDR) files. If no existing Internet Explorer files are from the hotfix environment, security update 2586448 installs the GDR files. <br /><br />Hotfixes are intended to correct only the problems that are described in the Microsoft Knowledge Base articles that are associated with the hotfixes. Apply hotfixes only to systems that are experiencing these specific problems. <br /><br />These hotfixes may receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next service pack that contains these hotfixes. <span>For more information about how to install the hotfixes that are included in security update 2586448, click the following article number to view the article in the Microsoft Knowledge Base: <div><a href=“https://support.microsoft.com/en-us/help/897225”>897225 </a> <br />How to install hotfixes that are included in cumulative security updates for Internet Explorer </div></span><br /><span>Note</span> In addition to installing hotfix files, review the Microsoft Knowledge Base article that is associated with the specific hotfix that you have to install to determine the registry modification that is required to enable that specific hotfix. <br /><br /><span>For more information about how to determine whether your existing Internet Explorer files are from the hotfix or from the GDR environment, click the following article number to view the article in the Microsoft Knowledge Base: <div><a href=“https://support.microsoft.com/en-us/help/824994”>824994 </a> <br />Description of the contents of Windows XP Service Pack 2 and Windows Server 2003 software update packages </div></span></div><h2>How to determine whether you are running a 32-bit or a 64-bit edition of Windows</h2><p>If you are not sure which version of Windows that you are running or whether it is a 32-bit version or 64-bit version, open System Information (Msinfo32.exe), and review the value that is listed for <strong>System Type</strong>. To do this, follow these steps:</p><ol><li><p>Click <strong>Start</strong>, and then click <strong>Run</strong>, or click <strong>Start Search</strong>.</p></li><li>Type <strong>msinfo32.exe</strong>, and then press Enter.</li><li>In <strong>System Information</strong>, review the value for <strong>System Type</strong>.<ul><li>For 32-bit editions of Windows, the <strong>System Type</strong> value is <strong>x86-based PC</strong>.</li><li>For 64-bit editions of Windows, the <strong>System Type</strong> value is <strong>x64-based PC</strong>.</li></ul></li></ol><p><span>For more information about how to determine whether you are running a 32-bit or 64-bit edition of Windows, click the following article number to view the article in the Microsoft Knowledge Base:</span></p><div><span><a href=“https://support.microsoft.com/en-us/help/827218”>827218 </a><br />How to determine whether a computer is running a 32-bit version or a 64-bit version of the Windows operating system</span></div></body></html>
Related
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C