SEC Consult has discovered a vulnerability in Microsoft Internet Explorer, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to the JView Profiler (javaprxy.dll) COM object being instantiated incorrectly in Internet Explorer via the object tag. This can be exploited via a malicious web site to cause a memory corruption.

Successful exploitation allows execution of arbitrary code, but requires that the file "javaprxy.dll" exists on the system.

NOTE: "javaprxy.dll" is included with Microsoft Java Virtual Machine. Exploit code is publicly available.

The vulnerability has been confirmed on a fully patched system with Internet Explorer 6.0, Microsoft VM (virtual machine) build 3802 and Microsoft Windows XP SP2. Internet Explorer 5.01 and 5.5 is reportedly also affected.

Solution
Apply patches:
Further details available to Secunia VIM customers

Provided and/or discovered by
sk0L and Martin Eiszner, SEC Consult.

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS05-037 (903235):
http://www.microsoft.com/technet/security/Bulletin/MS05-037.mspx

Microsoft:
http://www.microsoft.com/technet/security/advisory/903144.mspx

SEC Consult:
http://www.sec-consult.com/184.html

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers