This application requires Javascript for optimal performance.

MS.IE.Incomplete.Element.Memory.Corruption

Release Date

Mar 31, 2010

Severity

critical

Impact

Denial of service
System compromise

Description

This indicates a possible attack against a memory-corruption vulnerability in Microsoft Internet Explorer.

The vulnerability occurs when the vulnerable software handles certain DOM operations. A remote attacker may exploit this to execute arbitrary code or to cause a denial-of-service condition.

Affected Products

Microsoft Internet Explorer versions 5.01 to 8

Recommended Actions

Refer to the vendor's advisory for the patches:
http://www.microsoft.com/technet/security/Bulletin/MS10-018.mspx

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2010-0490

Reference/s

http://technet.microsoft.com/en-us/security/bulletin/ms10-018.mspx (MS-ID)

Reference: VID-20780