Description
Use-after-free vulnerability in the CAttrArray::PrivateFind function in mshtml.dll in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code by setting an unspecified property of a stylesheet object, aka "Uninitialized Memory Corruption Vulnerability."
References
- MS10-071 vendor-advisory
- http://www.zerodayinitiative.com/advisories/ZDI-10-197/
- 43705 vdb-entry
- oval:org.mitre.oval:def:7059 vdb-entry signature
- TA10-285A third-party-advisory
- http://support.avaya.com/css/P8/documents/100113324