Microsoft Internet Explorer contains a flaw related to the DHTML script functions that is triggered when a user visits a malicious web page that contains certain DHTML script functions, such as normalize, which can corrupt memory and allow the attacker to execute arbitrary code.

Microsoft has released a patch to address this issue. Additionally, it is possible to correct the flaw by implementing the following workaround(s): Disable active scripting.

• CVE ID: 2006-5581 (see also: NVD)
• Bugtraq ID: 21546
• Secunia Advisory ID: 23288
• Related OSVDB ID: 30813 30815 30816
• Microsoft Knowledge Base Article: 925454
• VUPEN Advisory: ADV-2006-4966
• Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2006-12/0235.html
• Generic Informational URL: http://msdn.microsoft.com/library/default.asp?url=/workshop/author/dhtml/reference/methods/normalize.asp
• Other Advisory URL: http://www.eeye.com/research/html/newsletters/alert/pub/AL20061212.html
  http://www.symantec.com/security_response/writeup.jsp?docid=2006-121212-1201-99
  http://www.zerodayinitiative.com/advisories/ZDI-06-048.html
• Microsoft Security Bulletin: MS06-072

• Sam Thomas - Zero Day Initiative (ZDI)