Description
Unspecified vulnerability in the CTableCol::OnPropertyChange method in Microsoft Internet Explorer 5.01 SP4 on Windows 2000 SP4; 6 SP1 on Windows 2000 SP4; and 6 on Windows XP SP2, or Windows Server 2003 SP1 or SP2 allows remote attackers to execute arbitrary code by calling deleteCell on a named table row in a named table column, then accessing the column, which causes Internet Explorer to access previously deleted objects, aka the "Uninitialized Memory Corruption Vulnerability."
References
- ie-object-array-code-execution(33253) vdb-entry
- oval:org.mitre.oval:def:1722 vdb-entry signature
- HPSBST02214 vendor-advisory
- ADV-2007-1712 vdb-entry
- 1018019 vdb-entry
- MS07-027 vendor-advisory
- 23769 third-party-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-07-027.html
- 34400 vdb-entry
- TA07-128A third-party-advisory
- 20070508 ZDI-07-027: Microsoft Internet Explorer Table Column Deletion Memory Corruption Vulnerability mailing-list
- 23771 vdb-entry