Microsoft Internet Explorer Remote Code Execution vulnerability
Last Update Date:
28 Jan 2011
Release Date:
24 Dec 2010
5552
Views
RISK: Medium Risk
A vulnerability has been identified in Microsoft Internet Explorer, which could be exploited by remote attackers to execute arbitrary code. This issue is caused by the creation of uninitialized memory during a CSS function within Internet Explorer. It is possible under certain conditions for the memory to be leveraged by an attacker using a specially crafted Web page
to gain remote code execution.
A proof of concept exploit code is publicly available.
Impact
- Remote Code Execution
System / Technologies affected
- Microsoft Internet Explorer 6
- Microsoft Internet Explorer 7
- Microsoft Internet Explorer 8
Solutions
There is no patch available for this vulnerability currently.
Vulnerability Identifier
Source
Related Link
Share with