Secunia

A vulnerability has been reported in Internet Explorer, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error within the handling of certain attributes in the <IFRAME> and <FRAME> HTML tags. This can be exploited to cause a buffer overflow via a malicious HTML document containing overly long strings in e.g. the "SRC" and "NAME" attributes of the <IFRAME> tag.

Successful exploitation allows execution of arbitrary code.

The vulnerability has been confirmed in the following versions:
* Internet Explorer 6.0 on Windows XP SP1 (fully patched).
* Internet Explorer 6.0 on Windows 2000 (fully patched).

NOTE: This advisory has been rated "Extremely critical" as a working exploit has been published on public mailing lists. A variant of the MyDoom virus is now also exploiting this vulnerability.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Discovered by:
ned

Additional research and exploit by:
Berend-Jan Wever

Changelog
Further details available in Customer Area

Original Advisory
MS04-040 (KB889293):
http://www.microsoft.com/technet/security/bulletin/ms04-040.mspx

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area