Signature Detail

HTTP: Microsoft Internet Explorer CSS Property Method Handling Memory Corruption

This signature detects attempts to exploit a known vulnerability in Microsoft Internet Explorer. An attacker can create a Web site with Web pages containing dangerous JavaScript, which if accessed by a victim, allows the attacker to gain control of the victim's client browser.

Extended Description

Microsoft Internet Explorer is prone to remote code-execution vulnerability. A remote attacker can exploit this issue to execute arbitrary code in the context of the user running the vulnerable application.

Affected Products

• Avaya Agent Access
• Avaya Basic Call Management System Reporting Desktop server
• Avaya Basic Call Management System Reporting Desktop
• Avaya CMS Supervisor
• Avaya Computer Telephony
• Avaya Contact Center Express
• Avaya Customer Interaction Express (CIE) User Interface 1.0
• Avaya CVLAN
• Avaya Enterprise Management
• Avaya Integrated Management 2.1.0
• Avaya Integrated Management
• Avaya Interaction Center
• Avaya Interaction Center - Voice Quick Start
• Avaya IP Agent
• Avaya IP Softphone
• Avaya Messaging Application Server MM 2.0
• Avaya Messaging Application Server MM 3.0
• Avaya Messaging Application Server MM 3.1
• Avaya Messaging Application Server
• Avaya Modular Messaging S3400
• Avaya Modular Messaging (MAS) 3.0.0
• Avaya Modular Messaging (MAS)
• Avaya Modular Messaging (MSS) 1.1.0
• Avaya Modular Messaging (MSS) 2.0.0
• Avaya Modular Messaging (MSS) 2.0.0 SP4
• Avaya Network Reporting
• Avaya OctelAccess(r) Server
• Avaya OctelDesignerTM
• Avaya Operational Analyst
• Avaya Outbound Contact Management
• Avaya Speech Access
• Avaya Unified Communication Center
• Avaya Unified Communications Center S3400
• Avaya Unified Messenger (r)
• Avaya Visual Messenger TM
• Avaya Visual Vector Client
• Avaya VPNmanagerTM Console
• Avaya Web Messenger
• HP Storage Management Appliance 2.1
• Microsoft Internet Explorer 6.0
• Microsoft Internet Explorer 6.0 SP1
• Microsoft Internet Explorer 7.0
• Microsoft Internet Explorer 7.0.5730.11
• Microsoft Internet Explorer 7.0 Beta1
• Microsoft Internet Explorer 7.0 Beta2
• Microsoft Internet Explorer 7.0 Beta3
• Nortel Networks CallPilot 1002Rp
• Nortel Networks CallPilot 200I
• Nortel Networks CallPilot 201I
• Nortel Networks CallPilot 702T
• Nortel Networks CallPilot 703T
• Nortel Networks Centrex IP Client Manager
• Nortel Networks Contact Center
• Nortel Networks Contact Center Administration
• Nortel Networks Contact Center Express
• Nortel Networks Contact Center Manager
• Nortel Networks Contact Center Manager Server
• Nortel Networks Contact Center Multimedia
• Nortel Networks Contact Center Web Client
• Nortel Networks Symposium Agent

References

• BugTraq: 23769
• CVE: CVE-2007-0945