HTTP: Microsoft Internet Explorer Element Handler Remote Code Execution

This signature detects attempts to exploit a known vulnerability in Microsoft Internet Explorer. An attacker can create a malicious Web site with Web pages containing dangerous JavaScript, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions.

Affected Products

Avaya messaging_application_server,Avaya meeting_exchange

References

BugTraq: 46158

CVE: CVE-2011-0036

Short Name

HTTP:STC:IE:DOCUMENT-RCE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Internet Explorer Element Handler Remote Code Execution

Extended Description

Affected Products

References

Found a potential security threat?