n.runs-SA-2008.008 Internet Explorer HTML Object Memory Corruption n.runs AG
http://www.nruns.com
n.runs-SA-2008.008
security(at)nruns.com
21-October-2008
* * *
Vendor: Microsoft
Affected Products:
- Internet Explorer 6
- Internet Explorer 7
- Windows XP SP2 & SP3
- Windows 2000 SP4
- Windows 2003 SP1
Vulnerability: Remote Code execution
Risk: High
Vendor communication:
2008/07/07 Thierry sends notification to Microsoft
2008/07/07 Acknowledgement and Receipt
2008/10/14 Microsoft publishes
Overview: A remote code execution vulnerability exists in Internet Explorer due to accesses to uninitialized memory in certain cases of DTML constructs. As a result, memory may be corrupted in such a way that an attacker could execute arbitrary code in the context of the logged-on user.
Impact: An attacker could exploit the vulnerability by constructing a specially prepared Website, when a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user. Credit:
Vulnerability discovered by Thierry Zoller of n.runs AG.
Unaltered electronic reproduction of this advisory is permitted. For all other reproduction or publication, in printing or otherwise, contact security@nruns.com for permission. Use of the advisory constitutes acceptance for use in an "as is" condition. All warranties are excluded. In no event shall n.runs be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages, even if n.runs has been advised of the possibility of such damages.
Copyright 2008 n.runs AG. All rights reserved. Terms of use apply. | 
