Description
Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote attackers to execute arbitrary code by assigning malformed values to certain properties, as demonstrated using the by property of an animateMotion SVG element, aka "Property Memory Corruption Vulnerability."
References
- 20080213 ZDI-08-006: Microsoft Internet Explorer SVG animateMotion.by Code Execution Vulnerability mailing-list
- HPSBST02314 vendor-advisory
- 27666 vdb-entry
- VU#228569 third-party-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-08-006.html
- 1019380 vdb-entry
- TA08-043C third-party-advisory
- 20080212 Microsoft Internet Explorer Property Memory Corruption Vulnerability third-party-advisory
- oval:org.mitre.oval:def:5396 vdb-entry signature
- ADV-2008-0512 vdb-entry
- MS08-010 vendor-advisory
- 28903 third-party-advisory