Info

Disclosure

Aug 27, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

A remote overflow exists in Microsoft Internet Explorer. The browser fails to check the bounds on the keyframe function call resulting in a heap overflow. With a specially crafted request, an attacker can cause arbitrary code to execute with the permissions of the browser resulting in a loss of confidentiality, integrity, and/or availability.

Classification

Location: Remote/Network Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Available
Disclosure: OSVDB Verified

Solution

Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround(s): Disable active scripting or execution of activeX controls. Alternatively, it is possible to set the kill bit for the vulnerable activeX control.

Products

Microsoft Corporation

Internet Explorer

6.0

References

Bugtraq ID: 20047
CVE ID: 2006-4777 (see also: NVD)
Secunia Advisory ID: 21910
Milw0rm: 2358
Related OSVDB ID: 28841
FrSIRT Advisory: ADV-2006-3593
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-08/0502.html
http://archives.neohapsis.com/archives/bugtraq/2006-09/0246.html
Generic Exploit URL: http://downloads.securityfocus.com/vulnerabilities/exploits/daxctle2.c
Microsoft Knowledge Base Article: http://support.microsoft.com/kb/240797
Vendor Specific Advisory URL: http://www.microsoft.com/technet/security/advisory/925444.mspx
News Article: http://www.theregister.co.uk/2006/09/18/ie_flaw_warnings_grow/
Other Advisory URL: http://www.xsec.org/index.php?module=releases&act=view&type=2&id=20

Credit

nop - nopxsec.org - XSec

Direct URL: http://osvdb.org/36218