HTTP: Microsoft Internet Explorer Memory Corruption (MS12-010)

This signature detects attempts to exploit a known vulnerability against Microsoft Internet Explorer. A successful attack can lead to arbitrary code execution.

Extended Description

Microsoft Internet Explorer is prone to a remote code-execution vulnerability because of a use-after-free error in the 'Mshtml.dll' library. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer. Failed attacks will cause denial-of-service conditions.

Affected Products

Avaya messaging_application_server,Avaya meeting_exchange

References

BugTraq: 51933 51935

CVE: CVE-2012-0155

Short Name
HTTP:STC:IE:IE-MEM-CORR
Severity
Major
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
(MS12-010) CVE-2012-0011 CVE-2012-0155 Corruption Explorer Internet Memory Microsoft bid:51933 bid:51935
Release Date
02/13/2012
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3813
False Positive
Occasionally
Vendors

Avaya

Microsoft

CVSS Score

9.3

Found a potential security threat?