Secunia
Login
|
|
|
|
|
|
|
|
|
Microsoft Windows COM Object Instantiation Memory Corruption Vulnerability
Release Date: 2005-08-18 Last Update: 2005-11-21 Views: 67,329
Secunia Advisory SA16480
Where:
From remote
Impact:
System access,
Solution Status:
Vendor Patch
Operating System:
Software:
CVE Reference(s):
Description
A vulnerability has been reported in Internet Explorer, which can be exploited by malicious people to compromise a vulnerable system.
The vulnerability is caused due to a memory corruption error when the "msdds.dll" (Microsoft DDS Library Shape Control) and other COM objects are instantiated in the Internet Explorer browser. For certain COM objects, e.g. "mdt2dd.dll" (Microsoft Design Tools PolyLine Control 2), the vulnerability is caused due to the failure of the memory allocator to zero the contents of heap memory allocated to new object instances. As a result, the object destructor may use the previous memory content as function pointers in its function calls.
Successful exploitation allows execution of arbitrary code, but requires that a user is tricked into visiting a malicious web site.
For a detailed list of affected COM objects, see the vendor advisory MS05-052.
NOTE: An exploit has been published.
Solution:
Apply patches:
Further details available to Secunia VIM customers
Provided and/or discovered by:
Reported by anonymous person.
Additional information provided by eEye Digital Security.
Original Advisory:
MS05-052 (KB896688):
http://www.microsoft.com/technet/security/Bulletin/MS05-052.mspx
Microsoft (KB906267):
http://www.microsoft.com/technet/security/advisory/906267.mspx
http://support.microsoft.com/kb/906267
eEye Digital Security:
http://www.eeye.com/html/research/advisories/AD20051011d.html
Deep Links:
Links available to Secunia VIM customers
Do you have additional information related to this advisory?
Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com
Subject: Microsoft Windows COM Object Instantiation Memory Corruption Vulnerability
|
No posts yet |
|
You must be logged in to post a comment. |
