Description
Microsoft Internet Explorer 5.01 and 6 does not properly handle uninitialized COM objects, which allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code, as demonstrated by the Nth function in the DirectAnimation.DATuple ActiveX control, aka "COM Object Instantiation Memory Corruption Vulnerability."
References
- VU#959049 third-party-advisory
- 1016663 vdb-entry
- MS06-042 vendor-advisory
- 27852 vdb-entry
- oval:org.mitre.oval:def:719 vdb-entry signature
- 20060808 TSRT-06-09: Microsoft DirectAnimation COM Object Memory Corruption Vulnerability mailing-list
- 21396 third-party-advisory
- ADV-2006-3212 vdb-entry
- TA06-220A third-party-advisory
- http://www.tippingpoint.com/security/advisories/TSRT-06-09.html
- 19340 vdb-entry