Description
Heap-based buffer overflow in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to execute arbitrary code via crafted UTF-8 encoded HTML that results in size discrepancies during conversion to Unicode, aka "HTML Decoding Memory Corruption Vulnerability."
References
- oval:org.mitre.oval:def:1931 vdb-entry signature
- 20595 third-party-advisory
- ADV-2006-2319 vdb-entry
- 1016291 vdb-entry
- oval:org.mitre.oval:def:1621 vdb-entry signature
- TA06-164A third-party-advisory
- VU#136849 third-party-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-06-017.html
- oval:org.mitre.oval:def:1862 vdb-entry signature
- oval:org.mitre.oval:def:1906 vdb-entry signature
- 26443 vdb-entry
- 20060613 ZDI-06-017: Microsoft Internet Explorer UTF-8 Decoding Heap Overflow Vulnerability mailing-list
- ie-utf8-html-execute-code(26766) vdb-entry
- 18309 vdb-entry
- MS06-021 vendor-advisory
- oval:org.mitre.oval:def:1414 vdb-entry signature
- oval:org.mitre.oval:def:1752 vdb-entry signature