OSVDB ID: 23964

Title: Microsoft IE mshtml.dll Multiple Script Action Handler Overflow

Info

Disclosure
Mar 16, 2006

Discovery
Unknown

Dates

Exploit
Mar 16, 2006

Solution
Unknown

Description

 Remote overflow exists in Microsoft Internet Explorer. The product fails to properly check bounds for handling HTML tags with multiple event handlers resulting in a buffer overflow. With a specially crafted HTML document, an attacker can cause affected web browsers to crash or remote code execution resulting in a loss of integrity, and/or availability.

Classification

 Location: Remote / Network Access
Attack Type: Denial of Service, Input Manipulation
Impact: Loss of Integrity, Loss of Availability
Exploit: Exploit Public
Disclosure: OSVDB Verified

Solution

 Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

Microsoft Corporation

Internet Explorer

 6.0 SP2
7.0 beta 2
7.0 beta 1

References

Credit
  • Michal Zalewski - lcamtufdione.ids.pl - Personal page


Direct URL: http://osvdb.org/23964