| | site-map | e-mail

User:

Guest

Name: Password:

www.center.hu / Archive / Security news / july, 2006 / New vulnerabilities in Internet Explorer 

New vulnerabilities in Internet Explorer

New vulnerabilities in Internet Explorer

Madrid, July 4, 2006 - Two new vulnerabilities have been identified in Internet Explorer. In both cases, the causes and effects are different, but they could potentially cause denial of services in the Microsoft browser.

The first problem can be exploited by remote attackers to cause a denial of service or even take complete control of affected systems. The flaw is due to a memory corruption error in the ˝HHCtrl˝ (HTML Help Control) when processing a specially crafted property. It could be exploited by convincing a user to visit a specially crafted Web page.

The second vulnerability could be exploited to cause denial of service conditions. The error is due to a null pointer dereference error in the Microsoft Data Access ActiveX ˝msado15.dll˝ object when processing a specially crafted property. It could be used by an attacker to crash a vulnerable browser by convincing a user to visit a malicious web page.

 

 

Oxygen3 24h-365d
by Panda Software

2006-07-05 11:35

Back