- Quick specs
- Price: Free
- Operating system: Windows Me, Windows NT, Windows XP, Windows 2000, Windows 98
- Date added: March 28, 2006
- Total Downloads: 2,847
- Downloads last week: 2
- See full specifications
- Average user rating: stars out of 2 votes
See all user reviews
Publisher's description
From eEye Digital Security :CNET Editor's Note: Organizations should only install this patch if they are not able to disable Active Scripting as a means of mitigation.
eEye Digital Security is advising customers to the existence of exploit code that targets a critical security vulnerability in Microsoft Internet Explorer. The exploit pertains to an unpatched vulnerability that has been released on various public mailing lists.
This issue affects any Windows operating system running Internet Explorer versions 5.01 SP4 through 6.0 SP1. The vulnerability results from the method in which Internet Explorer handles HTML Objects. This flaw allows for remote code to be executed on the target system. If successfully exploited, an attacker will only have the rights of the currently logged on user. System Administrators should be careful to not use Administrator accounts for general system use.
There have been numerous reports of this vulnerability being used on various websites in attempts to install Spyware and remote control ""bot"" software for use in Distributed Denial of Service (DDoS) attacks.
The recommended action required to protect systems against this attack is to disable Active Scripting from within Internet Explorer.
Additionally, eEye Digital Security s Research Team has released a workaround for the vulnerability as a temporary measure for customers who have not yet installed Blink, eEye's host-based intrusion prevention solution. This workaround is not meant to replace the forthcoming Microsoft patch, rather it is intended as a temporary protection against this flaw.
More popular Operating Systems & Updates downloads
- 24,163 downloads 1. CNET TechTracker app
- 17,149 downloads 2. DriverMax
- 6,144 downloads 3. Windows XP Service Pack 3
- 5,541 downloads 4. Windows XP Media Center Edition
- 5,338 downloads 5. Microsoft Windows XP Home Edition
- See all Operating Systems & Updates downloads
User reviews
- Average user rating: 0 stars Not yet available
- My rating: 0 stars Write review
-
Showing 2 of 2 user reviewsSee all 2 user reviews
This software version | All versions -
Version: eEye patch for the IE createTextRange() vulnerability
"Will not run on Windows 98SE"
Cons: Tested on Windows 98SE. Will not install. Requires NT or higher.
-
Version: eEye patch for the IE createTextRange() vulnerability
Pros: This doesnot work under ME
- See all 2 user reviews Write review
%20vulnerability%20-%20Free%20software%20downloads%20and%20software%20reviews%20-%20CNET%20Download.com&srcUrl=http://download.cnet.com/eEye-patch-for-the-IE-createTextRange-vulnerability/3000-18513_4-10518804.html){kind=small}