首页 -> 安全研究
安全研究
安全漏洞
Microsoft IE Content-Disposition处理可执行文件漏洞(MS02-023)
发布日期:2002-05-15
更新日期:2002-05-22
受影响系统:
Microsoft Internet Explorer 5.0.1SP1不受影响系统:
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows 2000 SP3
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP1
Microsoft Internet Explorer 5.0.1SP2
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows 2000 SP3
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP1
Microsoft Internet Explorer 5.01
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows NT 4.0 SP6
- Microsoft Windows NT 4.0 SP5
- Microsoft Windows NT 4.0 SP4
- Microsoft Windows NT 4.0 SP3
- Microsoft Windows 98 SE
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows 2000 SP3
Microsoft Internet Explorer 6.0
- Microsoft Windows NT 4.0 SP6a
- Microsoft Windows 98
- Microsoft Windows 95
- Microsoft Windows 2000 SP3
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP1
Microsoft Internet Explorer 5.5描述:
- Microsoft Windows NT 4.0 SP6a
Microsoft Internet Explorer 5.5
- Microsoft Windows NT 4.0 SP6
Microsoft Internet Explorer 5.5
- Microsoft Windows NT 4.0 SP5
Microsoft Internet Explorer 5.5
- Microsoft Windows NT 4.0 SP4
Microsoft Internet Explorer 5.5
- Microsoft Windows NT 4.0 SP3
Microsoft Internet Explorer 5.5
- Microsoft Windows 98
Microsoft Internet Explorer 5.5
- Microsoft Windows 95
Microsoft Internet Explorer 5.5
- Microsoft Windows 2000 SP3
Microsoft Internet Explorer 5.5
- Microsoft Windows 2000 Server SP2
Microsoft Internet Explorer 5.5
- Microsoft Windows 2000 Server SP1
Microsoft Internet Explorer 5.5SP1
- Microsoft Windows NT 4.0 SP6a
Microsoft Internet Explorer 5.5SP1
- Microsoft Windows NT 4.0 SP6
Microsoft Internet Explorer 5.5SP1
- Microsoft Windows NT 4.0 SP5
Microsoft Internet Explorer 5.5SP1
- Microsoft Windows NT 4.0 SP4
Microsoft Internet Explorer 5.5SP1
- Microsoft Windows NT 4.0 SP3
Microsoft Internet Explorer 5.5SP1
- Microsoft Windows 98
Microsoft Internet Explorer 5.5SP1
- Microsoft Windows 95
Microsoft Internet Explorer 5.5SP1
- Microsoft Windows 2000 SP3
Microsoft Internet Explorer 5.5SP1
- Microsoft Windows 2000 Server SP2
Microsoft Internet Explorer 5.5SP1
- Microsoft Windows 2000 Server SP1
Microsoft Internet Explorer 5.5SP2
- Microsoft Windows NT 4.0 SP6a
Microsoft Internet Explorer 5.5SP2
- Microsoft Windows NT 4.0 SP6
Microsoft Internet Explorer 5.5SP2
- Microsoft Windows NT 4.0 SP5
Microsoft Internet Explorer 5.5SP2
- Microsoft Windows NT 4.0 SP4
Microsoft Internet Explorer 5.5SP2
- Microsoft Windows NT 4.0 SP3
Microsoft Internet Explorer 5.5SP2
- Microsoft Windows 98
Microsoft Internet Explorer 5.5SP2
- Microsoft Windows 95
Microsoft Internet Explorer 5.5SP2
- Microsoft Windows 2000 SP3
Microsoft Internet Explorer 5.5SP2
- Microsoft Windows 2000 Server SP2
Microsoft Internet Explorer 5.5SP2
- Microsoft Windows 2000 Server SP1
BUGTRAQ ID: 4752
CVE(CAN) ID: CVE-2002-0193
Microsoft Internet Explorer是一款微软开发的流行的WEB浏览器。
Microsoft Internet Explorer在处理用来描述非HMTL内容的HTTP头信息存在漏洞,可导致远程攻击者使用户IE自动下载和执行程序。
此问题类似MS01-58(http://www.microsoft.com/technet/security/bulletin/MS01-058.asp)所描述的漏洞,由于在处理描述非HTML内容的HTTP头信息存在问题,攻击者可以构建提供content-type和content-disposition字段值不匹配的WEB页面,当用户查看此页面时,会自动下载和执行攻击者提供的程序。
此漏洞需要系统中的其他应用程序处理攻击者提供的畸形内容,并提交给操作系统产生错误,目前测试中表明当系统安装了Windows Media Player 6.4 或者7.1时可成功利用此漏洞。
<*来源:snsadv@lac.co.jp (snsadv@lac.co.jp)
链接:http://archives.neohapsis.com/archives/bugtraq/2002-05/0126.html
http://www.microsoft.com/technet/security/bulletin/MS02-023.asp
*>
测试方法:
警 告
以下程序(方法)可能带有攻击性,仅供安全研究与教学之用。使用者风险自负!
通过类似如下的HTTP头信息可利用此漏洞进行攻击:
Content-Type: audio/x-ms-wma
Content-disposition: inline; filename="foo.exe"
建议:
临时解决方法:
如果您不能立刻安装补丁或者升级,NSFOCUS建议您采取以下措施以降低威胁:
* 设置IE浏览器,点击菜单工具->Internet选项->安全->自定义级别,在文件下载上选择禁用。
厂商补丁:
Microsoft
---------
Microsoft已经为此发布了一个安全公告(MS02-023)以及相应补丁:
MS02-023:15 May 2002 Cumulative Patch for Internet Explorer (Q321232)
链接:http://www.microsoft.com/technet/security/bulletin/MS02-023.asp
补丁下载:
Microsoft Internet Explorer 5.0 1:
Microsoft Internet Explorer 5.0.1 SP2:
Microsoft Patch q321232
http://download.microsoft.com/download/ie501sp2/secpac27/5.01_sp2/NT45/EN-US/q321232.exe
Windows NT and Windows 2000
Microsoft Internet Explorer 5.0.1 SP1:
Microsoft Internet Explorer 6.0:
Microsoft Patch q321232
http://download.microsoft.com/download/IE60/secpac27/6/W98NT42KMeXP/EN-US/q321232.exe
浏览次数:3404
严重程度:0(网友投票)
绿盟科技给您安全的保障