Advisories

CERT-In Advisory CIAD-2005-0025

Vulnerabilities in Internet Explorer and Microsoft Windows Kernel

Original Issue Date: December 15, 2005

Severity Rating: High

Systems Affected

Microsoft Internet Explorer and Windows Kernel

Overview

Multiple vulnerabilities have been reported in the Internet Explorer and Microsoft Windows Kernel. This advisory describes these vulnerabilities addressed by the Microsoft Security Bulletins of December 2005.

Description

The vulnerability notes released by CERT-In with reference to Microsoft Security Bulletins are given below:

Microsoft Security Bulletin	Severity	CERT-In Vulnerability Notes
MS05-054:Cumulative Security Update for Internet Explorer	High	CIVN-2005-0116 Internet Explorer Vulnerabilities
		CIVN-2005-0112 Microsoft Internet Explorer "window " object Vulnerability
MS05-055:Vulnerability in Windows Kernel Could Allow Elevation of Privilege	Medium	CIVN-2005-0115 Local Privilege Escalation Vulnerability in Windows Kernel

Solution

Apply appropriate patches as mentioned in Microsoft Security Bulletin December 2005
http://www.microsoft.com/technet/security/bulletin/ms05-oct.mspx

Vendor Information

Microsoft Corporation
http://www.microsoft.com/technet/security/bulletin/ms05-oct.mspx

Disclaimer

The information provided herein is on "as is" basis, without warranty of any kind.

Contact Information

Email: info@cert-in.org.in
Phone: +91-11-24368572

Postal address

Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India