Description
A certain ActiveX control in the Microsoft Internet Authentication Service (IAS) Helper COM Component in iashlpr.dll allows remote attackers to cause a denial of service (browser crash) via a large integer value in the first argument to the PutProperty method. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect.
References
- 20080924 IAS Helper COM Component (iashlpr.dll) activex remote DOS mailing-list
- ias-helpercom-dos(45556) vdb-entry
- 4323 third-party-advisory