|
Internet Explorer new vulnerability in HTML Objects |
|
|
|
|
Sunday, 13 May 2007 |
|
Summary | Internet Explorer 7 provides "improved navigation through tabbed browsing, web search right from the toolbar, advanced printing, easy discovery, reading and subscription to RSS feeds, and much more". Secunia Research has discovered a vulnerability in Internet Explorer, which can be exploited by malicious people to compromise a vulnerable system. | | | Credit:
The information has been provided by Secunia Research.
The original article can be found at: http://secunia.com/secunia_research/2007-36/ |
Details : The vulnerability in Internet Explorer is caused due to an error in the handling of HTML objects as a CMarkup object is used in certain cases after it has been freed. This can be exploited to corrupt memory via a specially crafted web page.
Successful exploitation allows execution of arbitrary code.
Solution:
Apply patches (see the Microsoft security bulletin for details): http://www.microsoft.com/technet/security/Bulletin/MS07-027.mspx
Time Table:
18/01/2007 - Vendor notified.
19/01/2007 - Vendor response.
09/05/2007 - Public disclosure.
CVE Information:
CVE-2007-0947
|
