Description
Multiple unspecified vulnerabilities in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allow remote attackers to execute arbitrary code by instantiating certain COM objects from Wmm2fxa.dll as ActiveX controls including (1) DXImageTransform.Microsoft.MMSpecialEffect1Input, (2) DXImageTransform.Microsoft.MMSpecialEffect1Input.1, (3) DXImageTransform.Microsoft.MMSpecialEffect2Inputs, (4) DXImageTransform.Microsoft.MMSpecialEffect2Inputs.1, (5) DXImageTransform.Microsoft.MMSpecialEffectInplace1Input, and (6) DXImageTransform.Microsoft.MMSpecialEffectInplace1Input.1, which causes memory corruption during garbage collection.
References
- 18328 vdb-entry
- oval:org.mitre.oval:def:1135 vdb-entry signature
- VU#959049 third-party-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-06-018.html
- 20595 third-party-advisory
- ADV-2006-2319 vdb-entry
- 1016291 vdb-entry
- 20060613 ZDI-06-018: Microsoft Internet Explorer DXImageTransform ActiveX Memory Corruption Vulnerability mailing-list
- ie-wmm2fxadll-execute-code(26774) vdb-entry
- oval:org.mitre.oval:def:1767 vdb-entry signature
- oval:org.mitre.oval:def:2017 vdb-entry signature
- oval:org.mitre.oval:def:1973 vdb-entry signature
- oval:org.mitre.oval:def:1928 vdb-entry signature
- oval:org.mitre.oval:def:1830 vdb-entry signature
- MS06-021 vendor-advisory
- 26442 vdb-entry