Description
Buffer overflow in the implementation of an HTML directive in mshtml.dll in Internet Explorer 5.5 and 6.0 allows remote attackers to execute arbitrary code via a web page that specifies embedded ActiveX controls in a way that causes 2 Unicode strings to be concatenated.
References
- CA-2002-04 third-party-advisory
- 20020213 dH & SECURITY.NNOV: buffer overflow in mshtml.dll mailing-list
- oval:org.mitre.oval:def:925 vdb-entry signature
- ie-html-directive-bo(8116) vdb-entry
- MS02-005 vendor-advisory
- 20020227 Details and exploitation of buffer overflow in mshtml.dll (and few sidenotes on Unicode overflows in general) mailing-list
- 4080 vdb-entry