HTTP: Internet Explorer HTML Objects Memory Corruption (2)
This signature detects attempts to exploit a known vulnerability against Microsoft Internet Explorer. Version 7 is vulnerable. Successful attackers can crash the application and possibly execute arbitrary code.
Extended Description
Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Attackers can exploit this issue to execute arbitrary code in the context of the user running the application. Successful exploits will compromise the application and possibly the underlying computer. Failed attacks will cause denial-of-service conditions.
Affected Products
Nortel_networks self-service_media_processing_server,Microsoft internet_explorer
References
BugTraq: 32595
CVE: CVE-2008-4259
URL: http://www.microsoft.com/technet/security/Bulletin/MS08-073.mspx
Short Name
HTTP:STC:IE:MEMCORRUPT2
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
(2) CVE-2008-4259 Corruption Explorer HTML Internet Memory Objects bid:32595
Release Date
12/09/2008
Supported Platforms
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vsrx-19.2
srx-19.3
srx-branch-12.3
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx-12.3
vmx-19.3
srx-12.3
Sigpack Version
3729
False Positive
Unknown
Vendors
Nortel_networks
Microsoft
CVSS Score
9.3