Zero-day Patches

As a service to the community, Determina provides free patches for critical zero-day vulnerabilities until a vendor released patch is available. Customers who already have Determina VPS installed are proactively protected against these vulnerabilities and do not need to install these patches.

Animated Cursor Stack Overflow (CVE-2007-0038)

This is a runtime fix for the Animated Cursor stack overflow vulnerability affecting Internet Explorer, Mozilla Firefox, Microsoft Outlook and many other applications. It can be applied to Windows 2000 SP4, XP SP2 and 2003 SP1-2 systems and patches the vulnerabile code in memory, without modifying any files on disk.

This fix was released on Apr 2, 2007

README

Downloads:

MSI installer (GPG, SHA1)
Source code and binaries (GPG, SHA1)

Vendor status:

MS07-017 was released on Apr 3, 2007

Internet Explorer WebViewFolderIcon setSlice Integer Overflow (CVE-2006-3730)

This is a runtime fix for the Internet Explorer WebViewFolderIcon setSlice vulnerability. It can be applied to Windows 2000, XP and 2003 systems and patches the vulnerabile code in memory, without modifying any files on disk. To test if you are vulnerable, please use the following test page. When the zero-day patch is installed, Internet Explorer will be protected silently and the test page will not crash your browser.

This fix was released on Sep 29, 2006

README

Downloads:

MSI installer (GPG, SHA1)
Source code and binaries (GPG, SHA1)

Vendor status:

MS06-057 was released on Oct 10, 2006

Internet Explorer createTextRange Vulnerability (CVE-2006-1359)

This is a runtime fix for the Internet Explorer createTextRange vulnerability. It can be applied to Windows 2000, XP and 2003 systems and patches the vulnerabile code in memory, without modifying any files on disk.

This fix was released on Mar 27, 2006

README

Downloads:

MSI installer (GPG, SHA1)
Source code and binaries (GPG, SHA1)

Vendor status:

MS06-013 was released on Apr 11, 2006