Description
Unspecified vulnerability in Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code via certain DHTML script functions, such as normalize, and "incorrectly created elements" that trigger memory corruption, aka "DHTML Script Function Memory Corruption Vulnerability."
References
- 20061212 ZDI-06-048: Microsoft Internet Explorer normalize() Function Memory Corruption Vulnerability mailing-list
- oval:org.mitre.oval:def:116 vdb-entry signature
- ADV-2006-4966 vdb-entry
- 23288 third-party-advisory
- TA06-346A third-party-advisory
- VU#347448 third-party-advisory
- SSRT061288 vendor-advisory
- http://www.symantec.com/security_response/writeup.jsp?docid=2006-121212-1201-99
- MS06-072 vendor-advisory
- 30814 vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-06-048.html
- 1017373 vdb-entry
- 21546 vdb-entry