CVE-2011-0094

Related Files

Microsoft Internet Explorer Layouts Use-After-Free

Posted Apr 15, 2011

Authored by Nicolas Joly, VUPEN | Site vupen.com

The VUPEN Vulnerability Research Team discovered a critical vulnerability in Microsoft Internet Explorer. The vulnerability is caused by a use-after-free error in the "CSpliceTreeEngine::InsertSplice()" function within the MSHTML library when handling layouts, which could be exploited by remote attackers to compromise a vulnerable system by tricking a user into visiting a specially crafted web page. Versions 6 and 7 are affected.

tags | advisory, remote, web

advisories | CVE-2011-0094

SHA-256 | b8d96323c4a211ae41bedf90189a3872ffab299ee06c72ee8c21def85c12f670

Download | Favorite | View

iDEFENSE Security Advisory 2011-04-12.1

Posted Apr 13, 2011

Authored by iDefense Labs | Site idefense.com

iDefense Security Advisory 04.12.11 - Remote exploitation of a use-after-free vulnerability in Microsoft Corp.'s Internet Explorer could allow an attacker to execute arbitrary code with the privileges of the current user. The vulnerability occurs when an object is exchanged during a call to a certain function. The object's memory is freed, however a reference to the object remains. When the reference is later used to access the object, this now invalid memory is treated as a valid object and one of the object members is used to make an indirect function call. This may result in the execution of arbitrary code. Internet Explorer versions 6 and 7 are vulnerable.

tags | advisory, remote, arbitrary

advisories | CVE-2011-0094

SHA-256 | ee1c187d4880611f77e4216b21f1e62e5843ac4ca0b80b7c4c52c115321f230b

Download | Favorite | View