Details de MS04-038

NGSSoftware qui avait decouvert les failles patchees par MS04-038 ont publie aujuorchui les details des deux failles:

Name: Microsoft Internet Explorer Install Engine Control Buffer Overflow
Systems Affected: Microsoft Internet Explorer 5.x/6.x
Severity: High
Vendor URL: http://www.microsoft.com/
Author: Peter Winter-Smith [ peter@ngssoftware.com ]
Date of Public Advisory: 19th January 2004
Advisory number: #NISR19012005a
Advisory URL: http://www.ngssoftware.com/advisories/msinsengfull.txt
Reference: http://www.ngssoftware.com/advisories/msinsengdll.txt

Name: MSN Heartbeat Control Buffer Overflow
Systems Affected: Microsoft Internet Explorer with the MSN Heartbeat Control
Severity: High
Vendor URL: http://zone.msn.com/
Author: John Heasman [ john@ngssoftware.com ]
Date of Public Advisory: 19th January 2004
Advisory number: #NISR19012005d
Advisory URL: http://www.ngssoftware.com/advisories/heartbeatfull.txt
Reference: http://www.ngssoftware.com/advisories/heartbeat.txt