HTTP: Microsoft Internet Explorer DOM Object Handling Memory Corruption

This signature detects attempts to exploit a known vulnerability against Microsoft Internet Explorer DOM Object. Attackers can leverage this vulnerability to execute arbitrary code on the victim.

Extended Description

Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the browser. Successful exploits will compromise the browser and possibly the computer. Failed attacks may cause denial-of-service conditions.

Affected Products

Avaya messaging_application_server,Nortel_networks callpilot

References

BugTraq: 35235

CVE: CVE-2009-1532

Short Name
HTTP:STC:IE:DOM-OBJ-MC
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2009-1532 Corruption DOM Explorer Handling Internet Memory Microsoft Object bid:35235
Release Date
07/21/2011
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3336
False Positive
Unknown
Vendors

Nortel_networks

Avaya

Microsoft

CVSS Score

9.3

Found a potential security threat?