OSVDB ID: 31323 Title: Microsoft IE DIV Tag and HTML CSS Float Properties Arbitrary Code Execution |
Info |
|
|
Dates |
||||
|
|
Description |
Microsoft Internet Explorer contains a flaw that may allow a malicious user to corrupt memory. The issue is triggered when a user visits a maliciously crafted web page that contains layout combinations involving DIV tags and HTML CSS float properties. It is possible that the flaw may allow an attacker to execute arbitrary code resulting in a loss of integrity. |
Classification |
Location:
Remote / Network Access
Attack Type: Input Manipulation Impact: Loss of Integrity Solution: Patch / RCS Exploit: Exploit Private, Exploit Unknown Disclosure: OSVDB Verified, Vendor Verified |
Solution |
Currently, there are no known workarounds or upgrades to correct this issue. However, Microsoft has released a patch to address this vulnerability. |
Products |
|
References |
|
Credit |
|