Resolves a vulnerability in the MHTML protocol handler in Microsoft Windows that could allow an attacker to cause a victim to run malicious scripts when visiting various Web sites, resulting in information disclosure.
More...
Resolves a vulnerability in the MHTML protocol handler in Windows that could allow information disclosure if a user opens a specially crafted URL from an attacker's website.
More...
Revision Note: V2.0 (April 12, 2011): Advisory updated to reflect publication of security bulletin.
Summary: Microsoft has completed the investigation into public reports of this vulnerability. We have issued MS11-026 to address this issue. For more information about this issue...
Severity Rating: Important
Revision Note: V1.0 (June 14, 2011): Bulletin published.
Summary: This security update resolves a publicly disclosed vulnerability in the MHTML protocol handler in Microsoft Windows. The vulnerability could allow information disclosure if a user...
An online security firm says hackers are putting renewed efforts into breaching web email accounts
One is based on phishing, the other on the MHTML procol.
Read Full Story: New Email Scams Stealthier Than Ever: Report / Infopackets.com
Severity Rating: Important - Revision Note: V1.0 (June 14, 2011): Bulletin published.Summary: This security update resolves a publicly disclosed vulnerability in the MHTML protocol handler in Microsoft Windows. The vulnerability could allow information disclosure if a user opens a specially...
Bulletin Severity Rating:Important - This security update resolves a publicly disclosed vulnerability in the MHTML protocol handler in Microsoft Windows. The vulnerability could allow information disclosure if a user opens a specially crafted URL from an attacker's web site. An attacker would...
Revision Note: V2.0 (April 12, 2011): Advisory updated to reflect publication of security bulletin. Advisory Summary:Microsoft has completed the investigation into public reports of this vulnerability. We have issued MS11-026 to address this issue. For more information about this issue...
Revision Note: V1.1 (March 11, 2011): Revised Executive Summary to reflect investigation of limited, targeted attacks. Advisory Summary:Microsoft has completed the investigation into public reports of this vulnerability. We have issued MS11-026 to address this issue. For more information about...
Severity Rating: Important - Revision Note: V1.0 (April 12, 2011): Bulletin published.Summary: This security update resolves a publicly disclosed vulnerability in the MHTML protocol handler in Microsoft Windows. The vulnerability could allow information disclosure if a user visited a specially...
Bulletin Severity Rating:Important - This security update resolves a publicly disclosed vulnerability in the MHTML protocol handler in Microsoft Windows. The vulnerability could allow information disclosure if a user visited a specially crafted Web site. In a Web-based attack scenario, a Web...
Hello everyone,
My name is Pete Voss, and I'm a senior response communications manager with Microsoft Trustworthy Computing. I'll be joining the rest of the team on the MSRC blog and Link Removed Twitter handle to help provide you with the latest information and guidance for Microsoft...
.net framework
bulletins
critical
deployment guidance
important
internet explorer
mhtml
microsoft
office
patch
remote code execution
risk analysis
security
smb browser
trustworthy computing
updates
visual studio
vulnerabilities
webcast
windows
Revision Note: V1.1 (March 11, 2011): Revised Executive Summary to reflect investigation of limited, targeted attacks. Advisory Summary:Microsoft is investigating new public reports of a vulnerability in all supported editions of Microsoft Windows. The vulnerability could allow an attacker to...
Hello all --
Today, as part of our monthly security bulletin release, we have three bulletins addressing four vulnerabilities in Microsoft Windows and Microsoft Office. One bulletin is rated Critical, and this is the bulletin we recommend for priority deployment:
Link Removed due to 404...
bulletin
critical
deployment
dll
exploitability
important
march 2011
mhtml
microsoft
monitoring
office
remote desktop
security
service pack
technet
threat landscape
updates
vulnerabilities
webcast
windows
Revision Note: V1.0 (January 28, 2011): Advisory published.Summary: Microsoft is investigating new public reports of a vulnerability in all supported editions of Microsoft Windows. The vulnerability could allow an attacker to cause a victim to run malicious scripts when visiting various Web...
Hello. Today we're releasing Link Removed due to 404 Error, which describesa publicly disclosed scripting vulnerability affecting all versions ofMicrosoft Windows. The main impact of the vulnerability is unintendedinformation disclosure. We're aware of publishedinformation and proof-of-concept...
advisory
blog
collaboration
cross-site scripting
defense
disclosure
exploit
fix-it
html
internet explorer
mhtml
microsoft
protocol
research
security
threat
update
user information
vulnerability
workaround