Overview
A code execution vulnerability is present in some versions of Microsoft Internet Explorer.
A code execution vulnerability is present in some versions of Microsoft Internet Explorer. Microsoft Internet Explorer could invoke winhlp32.exe to open a arbitrary HLP file which can be exploited to execute arbitrary commands. To exploit this vulnerability, the attackers must convince a user to visit the maliciously crafted web page and then get them to press the F1 key in response to a pop up Message Box.
Attack VectorWebsite or e-mail with malicious content
User Interactionuser interaction is needed
Vendor StatusResponded, not patched
Vulnerable Systems
Internet Explorer
8,
Timeline
A proof of concept has been released.
2010-02-28Vendor has provided information on the vulnerability.
2010-03-01Vendor has provided information on the vulnerability.
Recommendations
McAfee is not aware of a vendor-supplied patch or update at this time. (3/1/2010)
Additional Info:
http://blogs.technet.com/msrc/archive/2010/02/28/investigating-a-new-win32hlp-and-internet-explorer-issue.aspx
Recommendations McAfee Product Mitigation
Additional Resources
Microsoft Security Advisory (981169) Vulnerability in VBScript Could Allow Remote Code Execution
http://www.microsoft.com/technet/security/advisory/981169.mspx