Description
Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange Javascript function, which allows remote attackers to execute arbitrary code, aka the "DHTML Method Heap Memory Corruption Vulnerability."
References
- MS05-014 vendor-advisory
- oval:org.mitre.oval:def:3137 vdb-entry signature
- VU#843771 third-party-advisory
- TA05-039A third-party-advisory
- oval:org.mitre.oval:def:1005 vdb-entry signature
- ie-cdf-execute-code(19137) vdb-entry
- oval:org.mitre.oval:def:3910 vdb-entry signature
- 11165 third-party-advisory
- http://secunia.com/secunia_research/2004-12/advisory/
- 1013125 vdb-entry
- oval:org.mitre.oval:def:710 vdb-entry signature
- oval:org.mitre.oval:def:2692 vdb-entry signature