Signature Detail

HTTP: Microsoft Internet Explorer Compressed Content URL Heap Overflow

This signature detects attempts to exploit a known vulnerability in Microsoft Internet Explorer. A successful attack can lead to a heap overflow and arbitrary remote code execution within the context of the server.

Extended Description

Microsoft Internet Explorer is prone to a remote buffer-overflow vulnerability. A successful exploit may result in arbitrary code-execution in the context of the user running the browser. This issue was introduced with the rereleased patches of Microsoft advisory MS06-042. This issue is nearly identical to that discussed in BID 19667 (Microsoft Internet Explorer HTTP 1.1 and Compression Long URI Buffer Overflow Vulnerability), but is a separate vulnerability.

Affected Products

• Microsoft Internet Explorer 5.0.1 SP4
• Microsoft Internet Explorer 6.0
• Microsoft Internet Explorer 6.0 SP1

References

• BugTraq: 19987
• CVE: CVE-2006-3873