[security-alerts] FW: [SA20906] Internet Explorer HTML Help ActiveX Control Memory Corruption

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

Такое ощущение, что это перполнение кучи нестабильно...

> ----------------------------------------------------------------------
> 
> TITLE:
> Internet Explorer HTML Help ActiveX Control Memory Corruption
> 
> SECUNIA ADVISORY ID:
> SA20906
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/20906/
> 
> CRITICAL:
> Highly critical
> 
> IMPACT:
> System access
> 
> WHERE:
> From remote
> 
> SOFTWARE:
> Microsoft Internet Explorer 6.x
> http://secunia.com/product/11/
> 
> DESCRIPTION:
> HD Moore has discovered a vulnerability in Internet Explorer, which
> potentially can be exploited by malicious people to compromise a
> user's system.
> 
> The vulnerability is caused due to an error in the HTML Help ActiveX
> control (hhctrl.ocx) when handling the "Image" property. This can be
> exploited to cause a memory corruption by setting an overly long
> string multiple times for the property.
> 
> Successful exploitation may allow execution of arbitrary code.
> 
> The vulnerability has been confirmed on a fully patched system
> running Windows XP SP2 with Internet Explorer 6.0. Other versions may
> also be affected.
> 
> SOLUTION:
> Disable the "Run ActiveX controls and plug-ins" setting for all but
> trusted sites.
> 
> PROVIDED AND/OR DISCOVERED BY:
> HD Moore
> 
> ORIGINAL ADVISORY:
> http://browserfun.blogspot.com/2006/07/mobb-2-internethhctrl-i
> mage-property.html
>