CVE-2006-3451

Related Files

Zero Day Initiative Advisory 06-026

Posted Aug 18, 2006

Authored by Tipping Point, Sam Thomas | Site zerodayinitiative.com

A vulnerability in Microsoft Internet Explorer allows arbitrary code execution. User interaction is required to exploit this vulnerability in that the target must visit a malicious page. The specific flaw exists due to improper garbage collection when multiple "imports" are used on a "styleSheets" collection. Crafting a long chain of CSS imports in an HTML document results in a memory corruption eventually leading to code execution.

tags | advisory, arbitrary, code execution

advisories | CVE-2006-3451

SHA-256 | dac941decc7a45743d5845a19527090e075dfa85d406566b90b661b23341d886

Download | Favorite | View