Buffer overflow in mshtml.dll updated since 13.02.2002
Published:		27.02.2002
Source:		3APA3A
SecurityVulns ID:		1782
Type:		client
Level:		8/10
Description:		Stack overflow on long filename or extension in <EMBED> tag.

Affected:		MICROSOFT : Internet Explorer 5.0
		MICROSOFT : Internet Explorer 5.5
		MICROSOFT : Outlook 98
		MICROSOFT : Outlook 2000
		MICROSOFT : Internet Explorer 6.0

Original document		3APA3A, Details and exploitation of buffer overflow in mshtml.dll (and few sidenotes on Unicode overflows in general) (27.02.2002)
		X-FORCE, Buffer Overflow in Microsoft Internet Explorer (26.02.2002)
		CERT, Advisory CA-2002-04 Buffer Overflow in Microsoft Internet Explorer (26.02.2002)
		MICROSOFT, Microsoft Security Bulletin MS02-005 (15.02.2002)
		3APA3A, dH & SECURITY.NNOV: buffer overflow in mshtml.dll (13.02.2002)

Files:		matrix.htm - proof of concept for Internet Explorer mshtml.dll overflow
		source code for matrix.htm
		buffer overflow in mshtml.dll
Discuss:		Read or add your comments to this news (0 comments)