Security Best Practice: Blocking Internet Explorer 6

Microsoft Internet Explorer 6 (IE6) is the sixth major revision of Internet Explorer, a web browser developed by Microsoft for Windows operating systems. It was released on August 27, 2001. It is the default browser shipped with Windows XP and Windows Server 2003, and was also made available for Windows NT 4.0, Windows 98, Windows ME, and Windows 2000. Although IE6 has now been superseded by newer versions of Internet Explorer, Microsoft still supports it in Windows 2000 SP4 and Windows XP SP3. This protection will detect and block Internet Explorer 6.

SBP-2010-12 .

Security Best Practice: Blocking Legacy Browsers

Old versions of Microsoft Internet Explorer, Mozilla Firefox and Opera internet browsers are known for their security issues. This protection will detect and block the following legacy browsers: Microsoft Internet Explorer 5, Firefox 2.0, Opera 9.2, Opera 9.0, Opera 8.5, Opera 8.0, and Opera 7.02.

SBP-2010-13.

Improvements have been made to the following protections:

Microsoft VBScript MsgBox Call with Malicious HLP File Vulnerability
CPAI-2010-049.

Microsoft Internet Explorer iepeers.dll Remote Code Execution Vulnerability
CPAI-2010-044.

Microsoft Office Drawing Shape Group Properties Buffer Overflow Vulnerability (MS10-003)
CPAI-2010-035.

Microsoft Internet Explorer Table Operations Memory Corruption Vulnerability (MS10-002)
CPAI-2010-016.

Microsoft Internet Explorer Page Refresh Uninitialized Memory Corruption Vulnerability (MS09-072)
CPAI-2009-263.

Microsoft Internet Explorer 8 Overlap Components Memory Corruption Vulnerability (MS09-072)
CPAI-2009-257.

Microsoft Media Player HeaderExtensionObject Heap Overflow Vulnerability (MS09-052)
CPAI-2009-228.

Symantec Alert Management System Intel Alert Originator Service Buffer Overflow Vulnerability
CPAI-2009-089.

JavaScript Percent-Encoding Obfuscation
SBP-2009-17.

Microsoft Internet Explorer DHTML Table Row Object Memory Corruption Vulnerability (MS09-019)
CPAI-2009-174.

Microsoft Internet Explorer HTML XMLHttpRequest Memory Corruption Vulnerability (MS09-019)
CPAI-2009-160.

Microsoft Internet Explorer history.go Improper Parameter Handling Remote Code Execution Vulnerability (MS09-014)
CPAI-2009-086.

EMC Captiva PixTools Distributed Imaging ActiveX Control File Creation Vulnerability
CPAI-2009-304.

Oracle BEA Weblogic Server console-help.portal Cross-Site Scripting Vulnerability
CPAI-2009-211.

Adobe Reader PDF Document Metadata XML Bomb Denial of Service Vulnerability (APSB09-15)
CPAI-2009-236.

Adobe JRun 4 Management Console Cross-Site Scripting Vulnerability (APSB09-12)
CPAI-2009-192.

Microsoft Internet Explorer XML Parsing Zero-Day Remote Code Execution Vulnerability (MS08-078)
CPAI-2008-187.

Microsoft URL Parsing Cross Domain Information Disclosure Vulnerability (MS08-048)
CPAI-2008-126.

Macrovision InstallShield Update Service Agent ActiveX Memory Corruption Vulnerability
CPAI-2008-146.

March 18, 2010

You have received this notification because you have subscribed to the SmartDefense mailing list. If you would prefer to no longer receive security alerts and defense notifications please click to Unsubscribe

As always, please feel free to contact us directly if you have any comments or questions.

Read Check Point's Privacy Policy
©2003.2009 Check Point Software Technologies Ltd. (Nasdaq: CHKP) All rights reserved.
800 Bridge Parkway, Redwood City, CA USA 94065