Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

This site is deprecated. Please CLICK HERE for latest updates

Short Name

HTTP:STC:CLSID:ACTIVEX:EXECHAND

Severity

Major

Recommended

No

Recommended Action

Drop

Category

HTTP

Keywords

ActiveX Exception Handling

Release Date

2006/12/12

Update Number

1213

Supported Platforms

di-5.3+, idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+

HTTP: ActiveX Exception Handling


This signature detects attempts to exploit a known vulnerability Microsoft Internet Explorer. Malicious Web pages containing dangerous script object can exploit this vulnerability and gain control of the client browser.

Extended Description

Microsoft Internet Explorer 6 allows remote attackers to execute arbitrary code by using JavaScript to cause certain errors simultaneously, which results in the access of previously freed memory, aka "Script Error Handling Memory Corruption Vulnerability."

Affected Products

  • Microsoft ie 6

References

  • BugTraq: 21552
  • CVE: CVE-2006-5579
  • URL: http://www.microsoft.com/technet/security/bulletin/ms06-072.mspx
  • URL: http://www.kb.cert.org/vuls/id/599832
  • URL: http://secunia.com/secunia_research/2006-58/advisory/

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out