36397 : Microsoft IE Crafted CSS Unspecified Memory Corruption
Printer | http://osvdb.org/36397 | Email This | Edit Vulnerability

Views This Week	Views All Time	Added to OSVDB	Last Modified	Modified (since 2008)	Percent Complete
6	901	over 4 years ago	about 1 year ago	4 times	100%

Timeline

Vendor Informed Date	Vendor Ack Date	Disclosure Date	Vendor Solution Date
2006-08-31	2006-09-01	2007-08-14	2007-08-14

Time to Patch	Time to Vendor Response
348 days	1 days

Keywords

NSFOCUS SA2007-01

Description

Microsoft IE contains a flaw that may allow a malicious user to gain the same user rights as the logged in user. The issue is triggered when IE parses certain strings in CSS. It is possible for a malacious person to construct a specially crafted website which could remotely execute code on the visitor's computer.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation, Other
Impact: Loss of Integrity
Solution: Upgrade
Exploit: Exploit Unknown
Disclosure: OSVDB Verified, Vendor Verified

Solution

Upgrade to IE version 6 or 7, as it has been reported to fix this vulnerability. Additionally, the vendor has released the MS07-045 cummulative security update to address this issue. Otherwise, users may opt to apply the following workaround: do not browse untrusted websites.

Products

Microsoft Corporation

Internet Explorer for Windows

5.0.1 SP4

References

Security Tracker: 1018562
OVAL ID: 1673
CVE ID: 2007-0943 (see also: NVD)
Bugtraq ID: 25288
Secunia Advisory ID: 26419
SCIP VulDB ID: 3243
Related OSVDB ID: 36395 36396
Microsoft Knowledge Base Article: 937143
VUPEN Advisory: ADV-2007-2869
News Article: http://www.computerworld.com/action/article.do?command=viewArticleBasic&taxonomyName=security&articleId=9030696
Other Advisory URL: http://www.nsfocus.com/english/homepage/research/0701.htm
Microsoft Security Bulletin: MS07-045

Tools & Filters

Snort	12277 13518
	25883

Credit

NSFOCUS Security Team - NSFOCUS Security Team

CVSSv2 Score

CVSSv2 Base Score = 6.8
Source: nvd.nist.gov | Generated: 2007-08-15 | Disagree?

Blogs

This product uses the Daylife API but is not endorsed or certified by Daylife.

This section lists the latest news and blogs found via the daylife API (and for older items, the technorati API), which mention or otherwise discuss this vulnerability.

None found at this time

Comments

Add Comment Hide Add Comment

No Comments.

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.