Trend Micro Security

Microsoft IE COM Object Instantiation Memory Corruption Vulnerability

2011年2月15日
  危険度: : 高
  CVE識別番号: CVE-2006-1303

  概要

 COM Object Instantiation Memory Corruption Vulnerability - CVE-2006-1303

kill bit for a CLSID in the Wmm2fxa.dll file 

B4DC8DD9-2CC1-4081-9B2B-20D7030234EF

cve: Multiple unspecified vulnerabilities in Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allow remote attackers to execute arbitrary code by instantiating certain COM objects from Wmm2fxa.dll as ActiveX controls including (1) DXImageTransform.Microsoft.MMSpecialEffect1Input, (2) DXImageTransform.Microsoft.MMSpecialEffect1Input.1, (3) DXImageTransform.Microsoft.MMSpecialEffect2Inputs, (4) DXImageTransform.Microsoft.MMSpecialEffect2Inputs.1, (5) DXImageTransform.Microsoft.MMSpecialEffectInplace1Input, and (6) DXImageTransform.Microsoft.MMSpecialEffectInplace1Input.1, which causes memory corruption during garbage collection.

  トレンドマイクロの対策

Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.

  対応方法

  Trend Micro Deep Security DPI Rule Number: 1000555
  Trend Micro Deep Security DPI Rule Name: 1000555 - Microsoft IE COM Object Instantiation Memory Corruption Vulnerability (MS06-021)

  影響を受けるソフトウェア

  • Microsoft Internet Explorer 5.0.1
  • Microsoft Internet Explorer 5.0.1 SP1
  • Microsoft Internet Explorer 5.0.1 SP2
  • Microsoft Internet Explorer 5.0.1 SP3
  • Microsoft Internet Explorer 5.0.1 SP4
  • Microsoft Internet Explorer 5.0.1 for Windows 2000
  • Microsoft Internet Explorer 5.0.1 for Windows 95
  • Microsoft Internet Explorer 5.0.1 for Windows 98
  • Microsoft Internet Explorer 5.0.1 for Windows NT 4.0
  • Microsoft Internet Explorer 6
  • Microsoft Internet Explorer 6.0
  • Microsoft Internet Explorer 6.0 SP1