Signature Detail

HTTP: Microsoft Internet Explorer HTML Layout Memory Corruption

This signature detects attempts to exploit a known memory corruption vulnerability in Microsoft Internet Explorer. It is due an error in the handling of certain objects. A remote attacker can exploit this vulnerability by enticing a target user to open a maliciously crafted HTML document. A successful attack would result in arbitrary code execution.

Extended Description

Microsoft Internet Explorer is prone to a remote code-execution vulnerability. Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks will cause denial-of-service conditions.

Affected Products

• Avaya Aura Conferencing 6.0 Standard
• Avaya Meeting Exchange - Client Registration Server
• Avaya Meeting Exchange - Recording Server
• Avaya Meeting Exchange - Streaming Server
• Avaya Meeting Exchange - Web Conferencing Server
• Avaya Meeting Exchange - Webportal
• Avaya Messaging Application Server 4
• Avaya Messaging Application Server 5
• Avaya Messaging Application Server MM 1.1
• Avaya Messaging Application Server MM 2.0
• Avaya Messaging Application Server MM 3.0
• Avaya Messaging Application Server MM 3.1
• Avaya Messaging Application Server
• Microsoft Internet Explorer 5.0.1
• Microsoft Internet Explorer 5.0.1
• Microsoft Internet Explorer 5.0.1 Sp1
• Microsoft Internet Explorer 5.0.1 SP1
• Microsoft Internet Explorer 5.0.1 Sp2
• Microsoft Internet Explorer 5.0.1 SP2
• Microsoft Internet Explorer 5.0.1 Sp3
• Microsoft Internet Explorer 5.0.1 SP3
• Microsoft Internet Explorer 5.0.1 Sp4
• Microsoft Internet Explorer 5.0.1 SP4
• Microsoft Internet Explorer 6.0
• Microsoft Internet Explorer 6.0
• Microsoft Internet Explorer 6.0 SP1
• Microsoft Internet Explorer 6.0 SP2
• Microsoft Internet Explorer 6.0 SP3
• Microsoft Internet Explorer 7.0
• Microsoft Internet Explorer 7.0
• Microsoft Internet Explorer 8

References

• BugTraq: 42292
• CVE: CVE-2010-2560