Description
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to execute arbitrary code via crafted layout combinations involving DIV tags and HTML CSS float properties that trigger memory corruption, aka "HTML Rendering Memory Corruption Vulnerability."
References
- TA06-318A third-party-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-06-041.html
- oval:org.mitre.oval:def:456 vdb-entry signature
- 31323 vdb-entry
- VU#197852 third-party-advisory
- 1017223 vdb-entry
- ADV-2006-4505 vdb-entry
- 20061114 ZDI-06-041: Microsoft Internet Explorer CSS Float Property Memory Corruption Vulnerability mailing-list
- ie-layout-code-execution(29199) vdb-entry
- 21020 vdb-entry
- MS06-067 vendor-advisory