MS.IE.GetElementsByTagName.CSS.Handling.Code.Execution

Release Date Nov 24, 2009
Severity critical
Impact System Compromise: Remote attackers can gain control of vulnerable systems.
Description It indicates a possible exploit of a remote code-execution vulnerability in Microsoft Internet Explorer.
Affected Products Microsoft Internet Explorer 6 Microsoft Internet Explorer 7
Recommended Actions Disable Javascript in Internet Explorer.
Coverage IPS VCM
Common Vulnerabilities and Exposures (CVE) CVE-2009-0323 CVE-2009-3672 CVE-2009-4054
Reference/s http://www.microsoft.com/technet/security/advisory/977981.mspx http://www.securityfocus.com/bid/37085 (BugTraq) http://www.frsirt.com/english/advisories/2009/3301 (FrSIRT)

Fortinet