Features
-
License:
Free
-
Editor's Rating:
Not rated
- Average User Rating:
-
Downloads:
2,835
- Operating Systems:
Windows Me, Windows NT, Windows XP, Windows 2000, Windows 98
- Additional Requirements:
Windows 98/Me/NT/2000/XP/2003 Server, Internet Explorer 5.01 or 6.0
- Limitations:
No limitations
- Date Added:
March 28, 2006
Publisher's description of eEye patch for the IE createTextRange() vulnerability
From eEye Digital Security:CNET Editor's Note: Organizations should only install this patch if they are not able to disable Active Scripting as a means of mitigation.
eEye Digital Security is advising customers to the existence of exploit code that targets a critical security vulnerability in Microsoft Internet Explorer. The exploit pertains to an unpatched vulnerability that has been released on various public mailing lists.
This issue affects any Windows operating system running Internet Explorer versions 5.01 SP4 through 6.0 SP1. The vulnerability results from the method in which Internet Explorer handles HTML Objects. This flaw allows for remote code to be executed on the target system. If successfully exploited, an attacker will only have the rights of the currently logged on user. System Administrators should be careful to not use Administrator accounts for general system use.
There have been numerous reports of this vulnerability being used on various websites in attempts to install Spyware and remote control ""bot"" software for use in Distributed Denial of Service (DDoS) attacks.
The recommended action required to protect systems against this attack is to disable Active Scripting from within Internet Explorer.
Additionally, eEye Digital Security s Research Team has released a workaround for the vulnerability as a temporary measure for customers who have not yet installed Blink, eEye's host-based intrusion prevention solution. This workaround is not meant to replace the forthcoming Microsoft patch, rather it is intended as a temporary protection against this flaw.
- See more CNET content tagged:
- eEye Digital Security
More popular Operating Systems & Updates downloads
- 9,833 downloads 1. Windows 7
- 4,661 downloads 2. Windows XP Service Pack 3
- 3,349 downloads 3. Windows XP Media Center Edition
- 3,292 downloads 4. Microsoft Windows XP Service Pack 3
- 3,013 downloads 5. Microsoft DirectX
- See all Operating Systems & Updates downloads
User reviews
- Average user rating: 0 stars Not yet available
- My rating: 0 stars Write review
-
Showing 2 of 2 user reviewsSee all 2 user reviews
This software version | All versions -
Version: eEye patch for the IE createTextRange() vulnerability
"Will not run on Windows 98SE"
Cons: Tested on Windows 98SE. Will not install. Requires NT or higher.
-
Version: eEye patch for the IE createTextRange() vulnerability
Pros: This doesnot work under ME
- See all 2 user reviews Write review
Submit your review
You must be 13 years of age or older to submit personal information to CNET Networks. In compliance with the Children's Online Privacy Protection Act of 1998, CNET Networks does not accept name and e-mail address information from users who are under 13 years of age.
All submitted ratings and written comments become the sole property of CNET Networks, Inc. (CNET) and may be used at CNET Networks' sole discretion. Ratings and written comments are generally posted within two to four business days in batch groups, not in real time. However, CNET Networks reserves the right to remove or refuse to post any submission for any reason. You acknowledge that you, not CNET Networks, are responsible for the contents of your submission.
CNET Networks is not responsible for the content of the publisher's descriptions or user reviews on this site. We encourage you to determine whether this product or your intended use is legal. We do not encourage or condone the use of any software in violation of applicable laws. CNET Download.com does not sell, resell, or license any of the products listed on the site. We cannot be held liable for issues that arise from the download or use of these products.
%20vulnerability%20-%20Free%20software%20downloads%20and%20reviews%20-%20CNET%20Download.com&srcUrl=http://download.cnet.com/eEye-patch-for-the-IE-createTextRange-vulnerability/3000-18513_4-10518805.html){kind=small}