|
|
Info |
Last Modified |
| about 1 year ago |
|
|
|
|
|
Description |
A remote buffer overflow exists in URLMON.DLL of Microsoft Internet Explorer. The browser fails to check the bounds on long URLs when using the HTTP 1.1 protocol and GZip compression resulting in a heap-based buffer overflow. With a specially crafted request, an attacker can cause execution of arbitrary code resulting in a loss of integrity.
|
|
Classification |
Location:
Remote/Network Access Required
Attack Type:
Input Manipulation
Impact:
Loss of Integrity
Exploit:
Exploit Unavailable
Disclosure:
OSVDB Verified
|
|
Solution |
Upgrade to version 7 or higher, as it has been reported to fix this vulnerability. Additionally, Microsoft has released a patch to address this issue, or users may opt to apply the following workaround: Disable the HTTP 1.1 protocol in Internet Explorer
|
|
Products |
|
Internet Explorer
 |
6 |
5 |
|
|
|
|
|
|
Credit |
- Derek Soeder - dsoeder
 eeye.com - eEye Digital Security
|
|
BlogsProvided by Technorati
|
None found at this time
|
|
|
