MS.IE.Object.Point.Null.Heap.Corruption

Release DateJun 11, 2009
SeverityCritical
ImpactSystem compromise
DescriptionThis indicates a possible attack against a heap-corruption vulnerability in Microsoft Internet Explorer.

The vulnerability is due to the software's inability to properly handle accessing of objects which do not exist. A remote attacker may exploit this to execute arbitrary code.
Affected ProductsMicrosoft Internet Explorer 7.0
Other versions may also be infected
Recommended ActionsPlease refer to the Microsoft Security Bulletin for further details or patches:
http://www.microsoft.com/technet/security/Bulletin/ms09-019.mspx
Common Vulnerabilities and Exposures (CVE)http://cve.mitre.org/cgi-bin/cvename.cgi?name=2009-1529
Microsoft Bulletin IDMS09-019   http://www.microsoft.com/technet/security/Bulletin/ms09-019.mspx
Reference: VID-17503