Signature Detail

HTTP: Microsoft Internet Explorer Frame Border Property Denial of Service

This signature detects attempts to exploit a known vulnerability against Microsoft Internet Explorer 6 and 7. A successful attack can result in a denial-of-service condition.

Extended Description

Microsoft Internet Explorer is prone to a denial-of-service vulnerability because it fails to properly validate user-supplied input. Successfully exploiting this issue can cause the browser to crash, resulting in a denial-of-service condition. Internet Explorer 6 and 7 are vulnerable; other versions may also be affected. Note: This issue was originally published as a buffer-overflow vulnerability that could result in remote code execution. Further analysis suggests that this vulnerability will only cause a denial-of-service on the affected browser; the issue cannot be exploited to execute arbitrary code.

Affected Products

• Microsoft Internet Explorer 6.0
• Microsoft Internet Explorer 6.0 SP1
• Microsoft Internet Explorer 7.0

References

• BugTraq: 41990