Technical Description

A critical vulnerability has been identified in Microsoft Internet Explorer, which could be exploited by remote attackers to execute arbitrary commands. This flaw is due to a memory corruption error when processing malformed HTML pages containing specially crafted calls to JavaScript "window()" objects and "onload" events, which could be exploited remote attackers to take complete control of an affected system by convincing a user to visit a malicious Web page [...]

References

http://www.frsirt.com/english/advisories/2005/2509
http://www.frsirt.com/english/reference/1111
http://www.microsoft.com/technet/security/advisory/911302.mspx
http://www.microsoft.com/technet/security/bulletin/ms05-054.mspx

Credits

Vulnerability originally reported by Benjamin Tobias Franz and exploited by Stuart Pearson

ChangeLog

2005-11-21 : Initial release
2005-11-21 : Updated References
2005-12-13 : Updated Solution

Vulnerability Management

Subscribe to FrSIRT VNS and receive real-time e-mail and SMS alerts when new vulnerabilities, exploits, or patches relevant to your systems and network configurations are available.

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form or by email to updates@frsirt.com.