Concurrency strikes MSIE (potentially exploitable msxml3 flaws)
As reported on full-disclosure, MS Internet Explorer is vulnerable to a race condition. The PoC is a Denial of Service, it causes IE 6 to stop responding when tested, other versions are also likely vulnerable. Likely more to report on this flaw in the AM. The author reports that it is possible this issue could lead to remote compromise.
Update:
CVE will be CVE-2007-0099
Cheers,
Adrien de Beaupre
Update:
CVE will be CVE-2007-0099
Cheers,
Adrien de Beaupre
Keywords:
0 comment(s)
×
Diary Archives
Comments