Description
Microsoft Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via unspecified DHTML function calls related to a tr element and the "insertion, deletion and attributes of a table cell," which trigger memory corruption when the window is destroyed, aka "DHTML Object Memory Corruption Vulnerability."
References
- ADV-2009-1538 vdb-entry
- MS09-019 vendor-advisory
- http://www.fortiguardcenter.com/advisory/FGA-2009-22.html
- 20090610 FortiGuard Advisory: Microsoft Internet Explorer DHTML Handling Remote Memory Corruption Vulnerability mailing-list
- oval:org.mitre.oval:def:5554 vdb-entry signature
- TA09-160A third-party-advisory
- 1022350 vdb-entry