Jump to content

MS11-037 - Important : Vulnerability in MHTML Could Allow Information Disclosure (254

Featured Replies

Posted

Severity Rating: Important

Revision Note: V2.1 (November 15, 2011): Corrected the install verification registry keys, update log file name, and removal information for Windows XP and Windows Server 2003. This is an informational change only.

Summary: This security update resolves a publicly disclosed vulnerability in the MHTML protocol handler in Microsoft Windows. The vulnerability could allow information disclosure if a user opens a specially crafted URL from an attacker's web site. An attacker would have to convince the user to visit the web site, typically by getting them to follow a link in an e-mail message or Instant Messenger message.

 

Read Bulletin

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...