Cumulative Security Update for Internet Explorer

ReportedFebruary 8, 2005 by Microsoft

VERSIONS AFFECTED

DESCRIPTION

Microsoft has releaseda cumulative update for IE. The update also includes new patches forvulnerabilities related to improper handling of drag-and-drop events,improper handling of URLs, improper handling of Dynamic HTML (DHTML)methods, and improper handling of content from across more than onedomain. All of the problems could allow a remote intruder to takecomplete control of a user's system.

VENDOR RESPONSE

Microsoft has releasedSecurity Bulletin MS05-014, "CumulativeSecurity Update for Internet Explorer (867282),"which explains the update and its caveats in more detail.