(Vendor Describes Workarounds) Microsoft Internet Explorer 'javaprxy.dll' COM Object Exception Handling Lets Remote Users Crash the Browser
|
|
SecurityTracker Alert ID: 1014363 |
|
SecurityTracker URL: http://securitytracker.com/id/1014363
|
|
CVE Reference:
CVE-2005-2087
(Links to External Site)
|
Date: Jul 2 2005
|
Impact:
Denial of service via network, Execution of arbitrary code via network, User access via network
|
Vendor Confirmed: Yes
|
Version(s): 6 SP1 and prior versions
|
Description:
A vulnerability was reported in Microsoft Internet Explorer in 'javaprxy.dll'. A remote user can cause the target user's browser to crash or execute arbitrary code.
A remote user can create specially crafted HTML that, when loaded by the target user, will trigger a heap overflow in 'javaprxy.dll' and cause the target user's browser to crash. Specially crafted object tags can cause certain COM componenets to crash.
It is also possible to overwrite a function pointer to execute arbitrary code.
A demonstration exploit from FrSIRT is available at:
http://www.frsirt.com/exploits/20050702.iejavaprxyexploit.pl.php
The vendor was notified on June 17, 2005.
sk0L and Martin Eiszner from SEC-CONSULT discovered this vulnerability.
|
Impact:
A remote user can cause the target user's browser to crash.
A remote user can execute arbitrary code on the target system.
|
Solution:
No solution was available at the time of this entry.
Microsoft has described some workarounds in their advisory, available at:
http://www.microsoft.com/technet/security/advisory/903144.mspx
|
Vendor URL: www.microsoft.com/technet/security/advisory/903144.mspx (Links to External Site)
|
Cause:
Exception handling error
|
Underlying OS:
Windows (Any)
|
|
Message History:
This archive entry is a follow-up to the message listed below.
|
Source Message Contents
|
Date: Sat, 2 Jul 2005 11:25:37 -0400
Subject: http://www.microsoft.com/technet/security/advisory/903144.mspx
|
> Microsoft Security Advisory (903144)
> A COM Object (Javaprxy.dll) Could Cause Internet Explorer to Unexpectedly Exit
|
|
