Internet Explorer 6.0 SP1 and previous versions, and possibly other versions, allows remote malicious users to cause a denial of service (application crash from "memory corruption") via certain malformed Cascading Style Sheet (CSS) elements that trigger heap-based buffer overflows, as demonstrated using the "<STYLE>@;/*" string, possibly due to a missing comment terminator that may cause an invalid length to trigger a large memory copy operation, aka the "CSS Heap Memory Corruption Vulnerability."
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
microsoft internet explorer 5.0.1 |
||
microsoft internet explorer 5.5 |
||
avaya s8100 |
||
avaya ip600 media servers |
||
avaya definity one media server |
||
avaya s3400 |
||
microsoft internet explorer 6.0 |
||
microsoft ie 6.0 |
||
avaya modular messaging message storage server 1.1 |
||
avaya modular messaging message storage server 2.0 |
Vulmon