Description
Race condition in the msxml3 module in Microsoft XML Core Services 3.0, as used in Internet Explorer 6 and other applications, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via many nested tags in an XML document in an IFRAME, when synchronous document rendering is frequently disrupted with asynchronous events, as demonstrated using a JavaScript timer, which can trigger NULL pointer dereferences or memory corruption, aka "MSXML Memory Corruption Vulnerability."
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://marc.info/?l=bugtraq&m=122703006921213&w=2 ↗
- http://osvdb.org/32627 ↗
- http://seclists.org/fulldisclosure/2007/Jan/0110.html ↗
- http://www.us-cert.gov/cas/techalerts/TA08-316A.html ↗
- http://www.securityfocus.com/bid/21872 ↗
- http://isc.sans.org/diary.php?storyid=2004 ↗
- http://secunia.com/advisories/23655 ↗
- http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0113.html ↗
- http://www.vupen.com/english/advisories/2008/3111 ↗
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-069 ↗
- http://www.securityfocus.com/archive/1/455986/100/0/threaded ↗
- http://securitytracker.com/id?1021164 ↗
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5793 ↗
- http://www.securityfocus.com/archive/1/455965/100/0/threaded ↗
- http://www.securityfocus.com/archive/1/456343/100/0/threaded ↗