Microsoft Internet Explorer "createTextRange()" Code Execution

ronjor · Mar 22, 2006

Critical: Highly critical
Impact: System access
Where: From remote
Solution Status: Unpatched

The vulnerability has been confirmed on a fully patched system with Internet Explorer 6.0 and Microsoft Windows XP SP2. The vulnerability has also been confirmed in Internet Explorer 7 Beta 2 Preview. Other versions may also be affected.
Click to expand...

Secunia

ronjor · Mar 22, 2006

Second Bug In A Week Smacks At IE

"We have confirmed this vulnerability," wrote Lennart Wistrand, lead security program manager, on the Microsoft Security Response Center (MSRC) blog. "I am writing a Microsoft Security Advisory on this…but we wanted to make sure customers knew we were aware of this and we will address it in a security update."
Click to expand...

Story

gerardwil · Mar 24, 2006

IE exploit on the loose

Folks, as Lorna predicted yesterday, it didn't take long for the exploits to appear for that IE vulnerability. One has been making the rounds that pops the calculator up (no, I'm not going to point you to the PoC code, it is easy enough to find if you read any of the standard mailing lists), but it is a relatively trivial mod to turn that into something more destructive (in fact one of our readers, Matt Davis, has provided us with a version that he created that is more destructive). For that reason, we're raising Infocon to yellow for the next 24 hours.
Click to expand...

http://isc.sans.org/diary.php

http://blogs.technet.com/msrc/archive/2006/03/22/422849.aspx

Log in or Sign up

Microsoft Internet Explorer "createTextRange()" Code Execution

ronjor Global Moderator

ronjor Global Moderator

gerardwil Registered Member

Log in or Sign up

Microsoft Internet Explorer "createTextRange()" Code Execution

ronjor Global Moderator

ronjor Global Moderator

gerardwil Registered Member

Useful Searches