Microsoft Internet Explorer HTTPS Proxy Information Disclosure Vulnerability

[wellss]

Has anyone else had an issue with this vulnerability?  It is supposed to be fixed at IE version 7 and higher but I have random users who are getting packets dropped b/c they are hitting this vulnerability even though they all have version 8.  I have over 1000 users and only 8 that are having this issue but I cannot find a difference between their machines.  I know this is starting to get a little out of PA support but I was hoping someone else came across this.

Thank you in advance.

Name

Microsoft Internet Explorer HTTPS Proxy Information Disclosure Vulnerability

ID

31232

Description

An information disclosure vulnerability exists in Microsoft Internet Explorer. The vulnerability can occur when Internet Explorer is configured to use an HTTPS proxy with Basic authentication. This flaw may be exploited by an attacker to read an HTTPS request URL sent by Internet Explorer despite the use of an encrypted connection.

Severity

CVE

CVE-2005-2830

Bugtraq ID

15825

Vendor ID

Reference

http://secunia.com/advisories/15368/