IE7 Security Vulnerabilities

This may have been posted before and if it has, then here it is again.

1. [SA22542] Internet Explorer 7 Popup Address Bar Spoofing Weakness
2. [SA22477] Internet Explorer 7 "mhtml:" Redirection Information
Disclosure
3. [SA22628] Internet Explorer 7 Window Injection Vulnerability


http://secunia.com/advisories/22628/

 

Have these vulnerabilities been addressed in service pack 2 for IE7

 

There are no Service Packs for IE7. To date Microsoft has not acknowledged any vulnerabilities in IE7. So, in short these have not been patched, yet.

 

Thank you for the information. I may have a problem. Following the installation of IE7 I got a prompt that I had new updates available. One of them was what I thought said it was service pack 2 for IE7. This was a installation wizzard package that said I should back up my data before installing. So I backed up and ran it again. I have checked my Windows Updates and the only other thing showing up for that date is the Genuine Windows Tool (is it a installation wizzard package). Was I duped into installing something dangerous?

 

Go to Windows Update and access the Update History. Tell me what the most recent updates are that you installed. The ones for December should be sufficient.

 

Windows Updates

Here are the recent updates. Thanks.

(KB922770) Windows XP Security Update for Microsoft .NET Framework, Version 2.0
(KB917283) Windows XP Security Update for Microsoft .NET Framework, Version 2.0
(KB829019) Windows XP Microsoft .NET Framework 2.0: x86
(KB917275) Windows XP Windows Rights Management Services Client with Service Pack 2
(KB920342) Windows XP Update for Windows XP
(KB909520) Windows XP Microsoft Base Smart Card Cryptographic Service Provider Package: x86
(KB896344) Windows XP Update for Windows XP
(KB925876) Windows XP Remote Desktop Connection (Terminal Services Client 6.0) for Windows XP
(KB928388) Windows XP Update for Windows XP
(KB929120) Windows XP Update for Windows XP
(1.14.1941.7) Windows Defender Definition Update 1.14.1941.7 for Windows Defender (KB915597)
(Driver) Windows XP Dell Inc. - Video - Mobile Intel(R) 915GM/GMS,910GML Express Chipset Family
(KB923689) Windows XP Security Update for Windows XP
(KB925398) Windows XP Security Update for Windows Media Player 6.4
(KB926255) Windows XP Security Update for Windows XP
(KB923694) Windows XP Cumulative Security Update for Outlook Express for Windows XP
(KB890830) Windows XP Windows Malicious Software Removal Tool - December 2006
(IE 7.0) Windows XP Windows Internet Explorer 7.0 for Windows XP
(KB892130) Windows XP Windows Genuine Advantage Validation Tool
(KB923980) Windows XP Security Update for Windows XP
(KB924270) Windows XP Security Update for Windows XP
(KB927978) Windows XP MSXML 4.0 SP2 Security Update
(KB890830) Windows XP Windows Malicious Software Removal Tool - November 2006
(KB920213) Windows XP Security Update for Windows XP
(KB922760) Windows XP Cumulative Security Update for Internet Explorer for Windows XP

 

The only recent update for IE is a hotfix, in November, for IE6. MS to date has not released any patches for IE7.