This application requires Javascript for optimal performance.

MS.IE.DOM.Modification.Evasion.Memory.Corruption

Release Date

Jul 25, 2011

Severity

high

Impact

Denial of Service: Remote attackers can crash vulnerable systems.

Description

This indicates an attack attempt against a Memory Corruption vulnerability in Microsoft Internet Explorer.

The vulnerability is caused by a defect in object lifetime management in the vulnerable application. A successful attack may allow the attacker to crash the affected application.

Affected Products

Microsoft Internet Explorer 6
Microsoft Internet Explorer 7
Microsoft Internet Explorer 8

Recommended Actions

Apply the most recent upgrade or patch from the vendor.
http://www.microsoft.com/technet/security/Bulletin/MS11-050.mspx

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2011-1256

Reference/s

http://technet.microsoft.com/en-us/security/bulletin/MS11-050.mspx (MS-ID)

Reference: VID-28190