Microsoft Internet Explorer Uninitialized Memory Corruption Remote Code Execution Vulnerability
2015年7月21日
危険度: : 緊急
CVE識別番号: CVE-2008-3475,MS08-058
概要
Microsoft Internet Explorer 6 does not properly handle errors related to using the componentFromPoint method on xml objects that have been (1) incorrectly initialized or (2) deleted, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "Uninitialized Memory Corruption Vulnerability."
トレンドマイクロの対策
Apply associated Trend Micro DPI Rules.
対応方法
Trend Micro Deep Security DPI Rule Number: 1002933
Trend Micro Deep Security DPI Rule Name: 1002933 - Microsoft Internet Explorer Uninitialized Memory Corruption Remote Code Execution
影響を受けるソフトウェア
- microsoft internet_explorer 5.01
- microsoft internet_explorer 6
- microsoft internet_explorer 7