Skip to main content

Microsoft Internet Explorer Remote Code Execution vulnerability

Last Update Date: 28 Jan 2011 Release Date: 24 Dec 2010 5552 Views

RISK: Medium Risk

A vulnerability has been identified in Microsoft Internet Explorer, which could be exploited by remote attackers to execute arbitrary code. This issue is caused by the creation of uninitialized memory during a CSS function within Internet Explorer. It is possible under certain conditions for the memory to be leveraged by an attacker using a specially crafted Web page
to gain remote code execution.

A proof of concept exploit code is publicly available.


Impact

  • Remote Code Execution

System / Technologies affected

  • Microsoft Internet Explorer 6
  • Microsoft Internet Explorer 7
  • Microsoft Internet Explorer 8

Solutions

There is no patch available for this vulnerability currently.


Vulnerability Identifier


Source


Related Link