Description
Microsoft Internet Explorer 6 through 9 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, aka "Style Object Memory Corruption Vulnerability."
References
- MS11-057 vendor-advisory
- oval:org.mitre.oval:def:12617 vdb-entry signature
- TA11-221A third-party-advisory