[PCWorks] Internet Explorer CSS Tag Parsing Code Execution Vulnerability ("Extremely critical" and currently being exploited)

From: "Clint Hamilton-PCWorks Admin" <PCWorks@xxxxxxxxxxxxxxxxxxxxxxxx>
To: "PCWorks@xxxxxxxxxxxxx" <pcworks@xxxxxxxxxxxxx>
Date: Thu, 4 Nov 2010 05:14:54 -0500

This is a rather unusual one.  It's listed as "Extremely critical" (from 
remote) and there is no patch, and plus it's currently being exploited. 
But there is a work-around at the M$ link.
-Clint


TITLE:
Internet Explorer CSS Tag Parsing Code Execution Vulnerability

Criticality level:  Extremely critical
Impact:  System access
Where:  From remote

http://secunia.com/advisories/42091/

DESCRIPTION:
A vulnerability has been reported in Internet Explorer, which can be 
exploited by malicious people to compromise a user's system.

The vulnerability is caused due to insufficient memory being allocated 
to store a certain combination of CSS (Cascading Style Sheets) tags. 
This can be exploited to overwrite a byte in a virtual table pointer and 
call into user-controlled data in memory via a specially crafted web 
page.

Successful exploitation allows execution of arbitrary code.

NOTE: The vulnerability is currently being actively exploited.

SOLUTION:
Apply a custom CSS to override website CSS styles (please see the 
Microsoft advisory for details).

ORIGINAL ADVISORY:
Microsoft:
http://www.microsoft.com/technet/security/advisory/2458511.mspx
http://blogs.technet.com/b/msrc/archive/2010/11/02/microsoft-releases-security-advisory-2458511.aspx
http://blogs.technet.com/b/srd/archive/2010/11/03/dep-emet-protect-against-attacks-on-the-latest-internet-explorer-vulnerability.aspx


=========================
The list's FAQ's can be seen by sending an email to 
PCWorks-request@xxxxxxxxxxxxx with FAQ in the subject line.

To unsubscribe, subscribe, set Digest or Vacation to on or off, go to 
//www.freelists.org/list/pcworks .  You can also send an email to 
PCWorks-request@xxxxxxxxxxxxx with Unsubscribe in the subject line.  Your 
member list settings can be found at 
//www.freelists.org/cgi-bin/lsg2.cgi/l=pcworks .  Once logged in, you have 
access to numerous other email options.  

The list archives are located at //www.freelists.org/archives/pcworks/ .  
All email posted to the list will be placed there in the event anyone needs to 
look for previous posts.
-zxdjhu-

[PCWorks] Internet Explorer CSS Tag Parsing Code Execution Vulnerability ("Extremely critical" and currently being exploited)

Other related posts: