|
Microsoft IE Devenum.dll COM Instantiation Code Execution |
|
|
|
|
Thursday, 11 August 2005 |
Summary
By crafting a malicious HTML page and alluring users to visit it, a remote attacker can execute arbitrary code with the privilege of the user.
Credit:
The information has been provided by NSFOCUS Security Team.
The original article can be found at: http://www.nsfocus.com/english/homepage/research/0502.htm
Details
Vulnerable Systems:
* Microsoft Internet Explorer 5.01 SP4
* Microsoft Internet Explorer 5.5 SP2
* Microsoft Internet Explorer 6
* Microsoft Internet Explorer 6 SP1
Internet Explorer does not properly call interface arguments when instantiating COM component in devenum.dll, resulting in exceptional memory access which might cause IE to crash. Carefully crafted HTML page might allow a remote attacker to execute arbitrary code.
Workaround:
Disable ActiveX control in Internet Explorer.
Disclosure Timeline:
2005.07.13 - Informed the vendor.
2005.07.16 - The vendor confirmed the vulnerability
2005.08.09 - The vendor releases a security bulletin (MS05-038) and related patches
|