Description
Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not properly handle argument validation for unspecified variables, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "HTML Component Handling Vulnerability."
References
- MS09-054 vendor-advisory
- TA09-286A third-party-advisory
- oval:org.mitre.oval:def:6419 vdb-entry signature