Description
Microsoft Internet Explorer 5 SP4 and 6 do not properly garbage collect when "multiple imports are used on a styleSheets collection" to construct a chain of Cascading Style Sheets (CSS), which allows remote attackers to execute arbitrary code via unspecified vectors.
References
- http://www.zerodayinitiative.com/advisories/ZDI-06-026.html
- 20060808 ZDI-06-026: Microsoft Internet Explorer Multiple CSS Imports Memory Corruption Vulnerability mailing-list
- 1016663 vdb-entry
- MS06-042 vendor-advisory
- oval:org.mitre.oval:def:5 vdb-entry signature
- VU#262004 third-party-advisory
- 21396 third-party-advisory
- ADV-2006-3212 vdb-entry
- 1343 third-party-advisory
- 27854 vdb-entry
- TA06-220A third-party-advisory
- 19316 vdb-entry