发布日期：2004-10-12
更新日期：2005-01-20

受影响系统：

Microsoft Internet Explorer 6.0SP1
Microsoft Internet Explorer 5.5SP2
Microsoft Internet Explorer 5.0.1SP4
Microsoft Internet Explorer 5.0.1SP3
Microsoft Internet Explorer 6.0
    - Microsoft Windows XP Professional SP1
    - Microsoft Windows XP Professional
    - Microsoft Windows XP Home SP1
    - Microsoft Windows XP Home
    - Microsoft Windows NT 4.0 SP6a
    - Microsoft Windows ME
    - Microsoft Windows 98
    - Microsoft Windows 2003 Web Edition
    - Microsoft Windows 2003 Standard Edition
    - Microsoft Windows 2003 Enterprise Edition 64-bit
    - Microsoft Windows 2003 Enterprise Edition
    - Microsoft Windows 2003 Datacenter Edition 64-bit
    - Microsoft Windows 2003 Datacenter Edition
    - Microsoft Windows 2000 SP3

描述：

---

BUGTRAQ  ID: 11367
CVE(CAN) ID: CVE-2004-0978

Microsoft MSN 'heartbeat.ocx'是部分MSN游戏站点上IE调用的组件。

Microsoft MSN 'heartbeat.ocx'对多个参数缺少充分边界缓冲区检查，远程攻击者可以利用这个漏洞可能以进程权限在系统上执行任意指令。

漏洞存在于MSN Heartbeat ActiveX组件上，此组件一般在部分MSN游戏站点上提供安装，并默认是标记为安全的脚本。当在WEB页上初始化Heartbeat控件时，必须设置多个参数，如URLS或者filenames，当提供超长的字符串给SetupData参数时，可发生基于堆的缓冲区溢出，精心构建提交数据可能以进程权限执行任意指令。


<*来源：NGSSoftware Insight Security Research （nisr@nextgenss.com）
  
  链接：http://marc.theaimsgroup.com/?l=bugtraq&m=109772954226268&w=2
        http://marc.theaimsgroup.com/?l=bugtraq&m=110616221411579&w=2
        http://www.microsoft.com/technet/security/bulletin/MS04-038.mspx
*>

建议：

---

厂商补丁：

Microsoft
---------
Microsoft已经为此发布了一个安全公告（MS04-038）以及相应补丁:
MS04-038：Cumulative Security Update for Internet Explorer (834707)
链接：http://www.microsoft.com/technet/security/bulletin/MS04-038.mspx

补丁下载：

Internet Explorer 5.01 Service Pack 3 on Windows 2000 SP3

http://www.microsoft.com/downloads/details.aspx?FamilyId=2D8E8E97-4946-4994-924B-1FB1DC1881BA&displaylang=en

Internet Explorer 5.01 Service Pack 4 on Windows 2000 SP4

http://www.microsoft.com/downloads/details.aspx?FamilyId=72DBE239-AF0A-42B5-B88C-A00371F6EC81&displaylang=en

Internet Explorer 5.5 Service Pack 2 on Microsoft Windows Me

http://www.microsoft.com/downloads/details.aspx?FamilyId=BE27F77C-3C2D-45F1-86DF-2B71799DA169&displaylang=en

Internet Explorer 6 on Windows XP

http://www.microsoft.com/downloads/details.aspx?FamilyId=A89CFBE8-C299-415D-A9D6-7CC6429C547D&displaylang=en

Internet Explorer 6 Service Pack 1 on Microsoft Windows 2000 Service Pack 3, on Microsoft Windows 2000 Service Pack 4, on Microsoft Windows XP, or on Microsoft Windows XP Service Pack 1

http://www.microsoft.com/downloads/details.aspx?FamilyId=7C1404E6-F5D4-4FED-9573-DD83F2DFF074&displaylang=en

Internet Explorer 6 Service Pack 1 on Microsoft Windows NT Server 4.0 Service Pack 6a, on Microsoft Windows NT Server 4.0 Terminal Service Edition Service Pack 6, on Microsoft Windows 98, on Microsoft Windows 98 SE, or on Microsoft Windows Me

http://www.microsoft.com/downloads/details.aspx?FamilyId=DE8D94C4-7F58-4CE7-B8BD-51CFD795B03E&displaylang=en

Internet Explorer 6 for Windows XP Service Pack 1 (64-Bit Edition)

http://www.microsoft.com/downloads/details.aspx?FamilyId=C05103E8-4402-4D54-BA03-FBBC24142E4D&displaylang=en

Internet Explorer 6 for Windows Server 2003

http://www.microsoft.com/downloads/details.aspx?FamilyId=19E69E5F-9C98-49AD-A61F-4F82A4014412&displaylang=en

Internet Explorer 6 for Windows Server 2003 64-Bit Edition and Windows XP 64-Bit Edition Version 2003

http://www.microsoft.com/downloads/details.aspx?FamilyId=566C2A05-2513-4E30-A3EA-87D4BF7F9730&displaylang=en

Internet Explorer 6 for Windows XP Service Pack 2

http://www.microsoft.com/downloads/details.aspx?FamilyId=CF47B515-3F51-43E1-9246-2C2264C49E2E&displaylang=en

浏览次数：4138
严重程度：0（网友投票）