Lucene search
RootSSV:12485HistoryOct 19, 2009 - 12:00 a.m.
Microsoft IE writing-mode内存破坏漏洞（MS09-054）
2009-10-1900:00:00
Root
www.seebug.org
11
0.958 High
EPSS
Percentile
99.3%
BUGTRAQ ID: 36616
CVE(CAN) ID: CVE-2009-2531
Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。
Internet Explorer在解析CSS样式信息时存在漏洞。如果对特定的HTML标签组合使用了writing-mode样式，就可能触发内存破坏。攻击者可以通过构建特制的网页来利用该漏洞，当用户查看网页时，就可能允许远程执行代码。
Microsoft Internet Explorer 8.0
Microsoft Internet Explorer 7.0
Microsoft Internet Explorer 6.0 SP1
Microsoft Internet Explorer 6.0
厂商补丁：
Microsoft
Microsoft已经为此发布了一个安全公告（MS09-054）以及相应补丁:
MS09-054：Cumulative Security Update for Internet Explorer (974455)
链接：http://www.microsoft.com/technet/security/Bulletin/MS09-054.mspx?pf=true
Related
checkpoint_advisories
checkpoint_advisories
zdi
zdi
Microsoft Internet Explorer writing-mode Memory Corruption Vulnerability
2009-10-13 00:00:00
securityvulns
securityvulns
ZDI-09-071: Microsoft Internet Explorer writing-mode Memory Corruption Vulnerability
2009-10-14 00:00:00
Microsoft Internet Explorer multiple security vulnerabilities
2009-10-14 00:00:00
prion
prion
Memory corruption
2009-10-14 10:30:00
Memory corruption
2009-10-14 10:30:00
Memory corruption
2010-01-22 22:00:00
cve
cve
nessus
nessus
MS09-054: Cumulative Security Update for Internet Explorer (974455)
2009-10-13 00:00:00
mskb
mskb
MS09-054: Cumulative security update for Internet Explorer
2014-06-23 07:27:42
openvas
openvas
Microsoft Internet Explorer Multiple Code Execution Vulnerabilities (974455)
2009-10-14 00:00:00
Microsoft Internet Explorer Multiple Code Execution Vulnerabilities (974455)
2009-10-14 00:00:00