Description
Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 through SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream that triggers memory corruption, as demonstrated using an invalid MIME-type that does not have a registered handler.
References
- TA08-099A third-party-advisory
- SSRT080048 vendor-advisory
- ADV-2008-1148 vdb-entry
- http://secunia.com/secunia_research/2007-100/advisory/
- MS08-024 vendor-advisory
- 1019801 vdb-entry
- 28552 vdb-entry
- 20080414 Secunia Research: Internet Explorer Data Stream HandlingVulnerability mailing-list
- oval:org.mitre.oval:def:5563 vdb-entry signature
- 27707 third-party-advisory