Trend Micro Security

MS12-023：Internet Explorer 用の累積的なセキュリティ更新プログラム (2675157)

2012年4月11日
  危険度: : 緊急
  CVE Identifier: CVE-2012-0168,CVE-2012-0169,CVE-2012-0170,CVE-2012-0171,CVE-2012-0172

  概要

This security update resolves several reported vulnerabilities found in Internet Explorer 6, 7, 8, and 9. Any of the said versions of Internet Explorer installed on normal Windows operating systems are more vulnerable than that of same versions installed on Windows server operating systems.

This particular update includes what Microsoft calls as defense-in-depth updates, a multi-layered approach of defense. The following vulnerabilities are solved by this update:

  • Print Feature Remote Code Execution Vulnerability - CVE-2012-0168
  • JScript9 Remote Code Execution Vulnerability - CVE-2012-0169
  • OnReadyStateChange Remote Code Execution Vulnerability - CVE-2012-0170
  • SelectAll Remote Code Execution Vulnerability - CVE-2012-0171
  • VML Style Remote Code Execution Vulnerability - CVE-2012-0172

  トレンドマイクロの対策

詳しい情報については以下のサイトをご参照ください。

  影響を受けるソフトウェア

  • Internet Explorer 6 (Windows XP Service Pack 3)
  • Internet Explorer 6 (Windows XP Professional x64 Edition Service Pack 2)
  • Internet Explorer 6 (Windows Server 2003 Service Pack 2)
  • Internet Explorer 6 (Windows Server 2003 x64 Edition Service Pack 2)
  • Internet Explorer 6 (Windows Server 2003 with SP2 for Itanium-based Systems)
  • Internet Explorer 7 (Windows XP Service Pack 3)
  • Internet Explorer 7 (Windows XP Professional x64 Edition Service Pack 2)
  • Internet Explorer 7 (Windows Server 2003 Service Pack 2)
  • Internet Explorer 7 (Windows Server 2003 x64 Edition Service Pack 2)
  • Internet Explorer 7 (Windows Server 2003 with SP2 for Itanium-based Systems)
  • Internet Explorer 7 (Windows Vista Service Pack 2)
  • Internet Explorer 7 (Windows Vista x64 Edition Service Pack 2)
  • Internet Explorer 7 (Windows Server 2008 for 32-bit Systems Service Pack 2)
  • Internet Explorer 7 (Windows Server 2008 for x64-based Systems Service Pack 2)
  • Internet Explorer 7 (Windows Server 2008 for Itanium-based Systems Service Pack 2)
  • Internet Explorer 8 (Windows XP Service Pack 3)
  • Internet Explorer 8 (Windows XP Professional x64 Edition Service Pack 2)
  • Internet Explorer 8 (Windows Server 2003 Service Pack 2)
  • Internet Explorer 8 (Windows Server 2003 x64 Edition Service Pack 2)
  • Internet Explorer 8 (Windows Vista Service Pack 2)
  • Internet Explorer 8 (Windows Vista x64 Edition Service Pack 2)
  • Internet Explorer 8 (Windows Server 2008 for 32-bit Systems Service Pack 2)
  • Internet Explorer 8 (Windows Server 2008 for x64-based Systems Service Pack 2)
  • Internet Explorer 8 (Windows 7 for 32-bit Systems)
  • Internet Explorer 8 (Windows 7 for 32-bit Systems Service Pack 1)
  • Internet Explorer 8 (Windows 7 for x64-based Systems)
  • Internet Explorer 8 (Windows 7 for x64-based Systems Service Pack 1)
  • Internet Explorer 8 (Windows Server 2008 R2 for x64-based Systems)
  • Internet Explorer 8 (Windows Server 2008 R2 for x64-based Systems Service Pack 1)
  • Internet Explorer 8 (Windows Server 2008 R2 for Itanium-based Systems)
  • Internet Explorer 8 (Windows Server 2008 R2 for Itanium-based Systems Service Pack 1)
  • Internet Explorer 9 (Windows Vista Service Pack 2)
  • Internet Explorer 9 (Windows Vista x64 Edition Service Pack 2)
  • Internet Explorer 9 (Windows Server 2008 for 32-bit Systems Service Pack 2)
  • Internet Explorer 9 (Windows Server 2008 for x64-based Systems Service Pack 2)
  • Internet Explorer 9 (Windows 7 for 32-bit Systems)
  • Internet Explorer 9 (Windows 7 for 32-bit Systems Service Pack 1)
  • Internet Explorer 9 (Windows 7 for x64-based Systems)
  • Internet Explorer 9 (Windows 7 for x64-based Systems Service Pack 1)
  • Internet Explorer 9 (Windows Server 2008 R2 for x64-based Systems)
  • Internet Explorer 9 (Windows Server 2008 R2 for x64-based Systems Service Pack 1)