HTTP: Microsoft Internet Explorer Table Layout Col Tag Cache Memory Corruption

This signature detects attempts to exploit a known vulnerability in Microsoft Internet Explorer. It is due to an error handling the removal of a Col element from table layout. A Col element can still be accessed through a cache even after it has been removed from an HTML table container. A remote attacker can exploit this by enticing a target user to open a maliciously crafted HTML document. A successful attack can result in arbitrary code execution as the user.

Extended Description

Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the computer. Failed attacks may cause denial-of-service conditions.

Affected Products

Nortel_networks self-service_media_processing_server,Microsoft internet_explorer

References

BugTraq: 37891

CVE: CVE-2010-0244

Short Name

HTTP:STC:IE:COL-TAG-CACHE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Internet Explorer Table Layout Col Tag Cache Memory Corruption

Extended Description

Affected Products

References

Found a potential security threat?