MS.IE.DOM.Operation.Handling.Memory

NameMS.IE.DOM.Operation.Handling.Memory.Corruption
Last Updated DateJul 02, 2009
Release DateJun 11, 2009
SeverityCritical
ImpactSystem Compromise: Remote attackers can gain control of vulnerable systems.
DescriptionThis indicates an attack attempt against a memory-corruption vulnerability in
Microsoft Internet Explorer.

The vulnerability is caused by an error when the vulnerable software handles
certain DOM operations. It allows a remote attacker to execute
arbitrary code via sending a crafted web page.
Affected ProductsInternet Explorer 5.01
Internet Explorer 6
Internet Explorer 6 Service Pack 1
Internet Explorer 7
Internet Explorer 8
Recommended ActionsRefer to the vendor's website for the suggested workaround:
http://www.microsoft.com/technet/security/Bulletin/MS09-019.mspx
Common Vulnerabilities and Exposures (CVE)http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-1532
Microsoft Bulletin IDMS09-019   http://www.microsoft.com/technet/security/Bulletin/MS09-019.mspx
Reference: VID-17501