Signature Detail

HTTP: Microsoft Internet Explorer CSS Property Method Handling Memory Corruption

This signature detects attempts to exploit a known vulnerability in Microsoft Internet Explorer. An attacker can create a Web site with Web pages containing dangerous JavaScript, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Microsoft Internet Explorer is prone to remote code-execution vulnerability. A remote attacker can exploit this issue to execute arbitrary code in the context of the user running the vulnerable application.

Affected Products

• Avaya agent_access
• Avaya basic_call_management_system_reporting_desktop server
• Avaya basic_call_management_system_reporting_desktop
• Avaya cms_supervisor
• Avaya computer_telephony
• Avaya contact_center_express
• Avaya customer_interaction_express_(cie)_user_interface 1.0
• Avaya cvlan
• Avaya enterprise_management
• Avaya integrated_management 2.1.0
• Avaya integrated_management
• Avaya interaction_center
• Avaya interaction_center-voice_quick_start
• Avaya ip_agent
• Avaya ip_softphone
• Avaya messaging_application_server MM 2.0
• Avaya messaging_application_server MM 3.0
• Avaya messaging_application_server MM 3.1
• Avaya messaging_application_server
• Avaya modular_messaging S3400
• Avaya modular_messaging_(mas) 3.0.0
• Avaya modular_messaging_(mas)
• Avaya modular_messaging_(mss) 1.1.0
• Avaya modular_messaging_(mss) 2.0.0
• Avaya modular_messaging_(mss) 2.0.0 SP4
• Avaya network_reporting
• Avaya octelaccess(r)_server
• Avaya octeldesignertm
• Avaya operational_analyst
• Avaya outbound_contact_management
• Avaya speech_access
• Avaya unified_communication_center
• Avaya unified_communications_center_s3400
• Avaya unified_messenger_(r)
• Avaya visual_messenger_tm
• Avaya visual_vector_client
• Avaya vpnmanagertm_console
• Avaya web_messenger
• Hp storage_management_appliance 2.1
• Microsoft internet_explorer 6.0
• Microsoft internet_explorer 6.0 SP1
• Microsoft internet_explorer 7.0
• Microsoft internet_explorer 7.0.5730.11
• Microsoft internet_explorer 7.0 Beta1
• Microsoft internet_explorer 7.0 Beta2
• Microsoft internet_explorer 7.0 Beta3
• Nortel_networks callpilot 1002Rp
• Nortel_networks callpilot 200I
• Nortel_networks callpilot 201I
• Nortel_networks callpilot 702T
• Nortel_networks callpilot 703T
• Nortel_networks centrex_ip_client_manager
• Nortel_networks contact_center
• Nortel_networks contact_center_administration
• Nortel_networks contact_center_express
• Nortel_networks contact_center_manager
• Nortel_networks contact_center_manager_server
• Nortel_networks contact_center_multimedia
• Nortel_networks contact_center_web_client
• Nortel_networks symposium_agent

References

• BugTraq: 23769
• CVE: CVE-2007-0945