MS Internet Explorer Uninitialized Memory Corruption
Publish Date: 15 de февраля de 2011
Severity: : Critical
CVE Kennungen: : CVE-2010-2559
Advisory Date: 15 de февраля de 2011
DESCRIPTION
Microsoft Internet Explorer 8 does not properly handle objects in memory, which
allows remote attackers to execute arbitrary code by accessing an object that
(1) was not properly initialized or (2) is deleted, leading to memory
corruption, aka "Uninitialized Memory Corruption Vulnerability," a different
vulnerability than CVE-2009-3671, CVE-2009-3674, CVE-2010-0245, and
CVE-2010-0246.
INFORMATION EXPOSURE
Trend Micro Deep Security shields networks through Deep Packet Inspection (DPI) rules. Trend Micro customers using OfficeScan with Intrusion Defense Firewall (IDF) plugin are also protected from attacks using these vulnerabilities. Please refer to the filter number and filter name when applying appropriate DPI and/or IDF rules.
SOLUTION
Trend Micro Deep Security DPI Rule Number: 1004350
Trend Micro Deep Security DPI Rule Name: 1004350 - MS Internet Explorer Uninitialized Memory Corruption
AFFECTED SOFTWARE AND VERSION:
- microsoft ie 8