This host is missing a critical security update according to Microsoft Bulletin MS07-069.

Successful exploitation will allow attacker to execute arbitrary code with the privileges of the application. Failed attacks may cause denial-of-service conditions. Impact Level: System/Application

Run Windows Update and update the listed hotfixes or download and update mentioned hotfixes in the advisory from the below link, http://www.microsoft.com/technet/security/bulletin/ms07-069.mspx

The flaws are due to - A use-after-free error in mshtml.dll when handling 'setExpression()' method calls. - An error within the handling of the 'cloneNode()' and 'nodeValue()' methods. - An error when handling document objects that have been created, modified, deleted, and are then accessed. - An error when displaying web pages containing certain unexpected method calls.

Microsoft Internet Explorer version 5.x/6.x/7.x

• http://secunia.com/advisories/28036
• http://securitytracker.com/alerts/2007/Dec/1019078.html
• http://www.microsoft.com/technet/security/bulletin/ms07-069.mspx

---

Updated on 2015-03-25