This application requires Javascript for optimal performance.

MS.IE.Scripts.Loading.HTML.Parsing.Memory.Corruption

Release Date

Mar 31, 2010

Severity

critical

Impact

Denial of service
System compromise

Description

This indicates a possible attack against a race-condition memory-corruption vulnerability in Microsoft Internet Explorer.

This vulnerability is caused by improper handling of scripts loading and HTML parsing. A remote attacker may exploit this to execute arbitrary code or to cause a denial-of-service condition.

Affected Products

Microsoft IE 5.01-IE 8

Recommended Actions

Please refer to the Microsoft advisory for patches:
http://www.microsoft.com/technet/security/Bulletin/ms10-018.mspx

Coverage

IPS
VCM

Common Vulnerabilities and Exposures (CVE)

CVE-2010-0489

Reference/s

http://technet.microsoft.com/en-us/security/bulletin/ms10-018.mspx (MS-ID)

Reference: VID-20775