Description
Microsoft Internet Explorer 6 and 7 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing a deleted object, aka "OnReadyStateChange Remote Code Execution Vulnerability."
References
- MS12-023 vendor-advisory
- 1026901 vdb-entry
- TA12-101A third-party-advisory
- 81128 vdb-entry
- oval:org.mitre.oval:def:15573 vdb-entry signature
- ms-ie-onreadystatechange-code-exec(74381) vdb-entry