HTTP: Microsoft Internet Explorer CSS Import Use-After-Free Code Execution

This signature detects attempts to exploit a known un-patched code execution vulnerability in Microsoft's Internet Explorer. It is due to the way mshtml.dll handles CSS files with multiple import statements. An attacker can exploit this by enticing a user to open a specially crafted CSS file. A successful attack can lead to a use-after-free condition, which can allow the attacker to execute arbitrary code in the security context of the Internet Explorer.

Extended Description

Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability. Attackers can exploit this issue by enticing an unsuspecting user to view a specially crafted web page. Successfully exploiting this issue may allow attackers to execute arbitrary code in the context of the application. Failed exploit attempts will result in denial-of-service conditions. Internet Explorer versions 6, 7, and 8 are vulnerable.

Affected Products

Avaya messaging_application_server,Avaya meeting_exchange

References

BugTraq: 45246

CVE: CVE-2010-3971

Short Name

HTTP:STC:IE:CSS-IMPORT

Severity

Major

Recommended

False

Recommended Action

None

HTTP: Microsoft Internet Explorer CSS Import Use-After-Free Code Execution

Extended Description

Affected Products

References

Found a potential security threat?