0-day a l'Internet Explorer (versions 6.0 i 7.0)
22 novembre 2009 —  — Classificat com a: Tècniques, Windows — Comentaris (0) |
[SANS Institute] IE6 and IE7 0-Day Reported. Detectada una vulnerabilitat, sense pegat, a l'Internet Explorer versions 6.0 i 7.0
A vulnerability has been identified in Microsoft Internet Explorer, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by a dangling pointer in the Microsoft HTML Viewer (mshtml.dll) when retrieving certain CSS/STYLE objects via the "getElementsByTagName()" method, which could allow attackers to crash an affected browser or execute arbitrary code by tricking a user into visiting a malicious web page.
L'antivirus de Symantec, com a mínim, el detecta… però marcat com de risc molt baix.
Entrades aleatòries
Carregant…
