Microsoft Internet Explorer multiple security vulnerabilities
Published:		11.02.2009
Source:		MICROSOFT
SecurityVulns ID:		9669
Type:		client
Level:		6/10
Description:		Few memory corruptions.

Affected:		MICROSOFT : Windows 2000 Server
		MICROSOFT : Windows 2000 Professional
		MICROSOFT : Windows XP
		MICROSOFT : Windows 2003 Server
		MICROSOFT : Windows Vista
		MICROSOFT : Windows 2008 Server
CVE:		CVE-2009-0076 (Microsoft Internet Explorer 7, when XHTML strict mode is used, allows remote attackers to execute arbitrary code via the zoom style directive in conjunction with unspecified other directives in a malformed Cascading Style Sheets (CSS) stylesheet in a crafted HTML document, aka "CSS Memory Corruption Vulnerability.")
		CVE-2009-0075 (Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka "Uninitialized Memory Corruption Vulnerability.")

Original document		ZDI, ZDI-09-012: Microsoft Internet Explorer Malformed CSS Memory Corruption (11.02.2009)
		ZDI, ZDI-09-011: Microsoft Internet Explorer CFunctionPointer Memory Corruption Vulnerability (11.02.2009)
		MICROSOFT, Microsoft Security Bulletin MS09-002 - Critical Cumulative Security Update for Internet Explorer (961260) (11.02.2009)

Files:		Microsoft Security Bulletin MS09-002 - Critical Cumulative Security Update for Internet Explorer (961260)
Discuss:		Read or add your comments to this news (0 comments)