Jared DeMott and Justin Seitz have discovered a vulnerability in LinkedIn Internet Explorer Toolbar, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error within the IEToolbar.IEContextMenu.1 (LinkedInIEToolbar.dll) when handling the "Search()" method, which takes in a VARIANT as the "varBrowser" argument. This can be exploited to execute arbitrary code when a user e.g. visits a malicious website.

The vulnerability is confirmed in version 3.0.2.1098. Other versions may also be affected.

NOTE: Working exploit code is publicly available.

Solution
Update to the latest version.
Further details available to Secunia VIM customers

Provided and/or discovered by
Jared DeMott and Justin Seitz, VDA Labs

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.vdalabs.com/tools/linkedin.html

Alternate/detailed remediation
Further details available in Customer Area

Deep Links
Links available to Secunia VIM customers