New Zero-Day Bug Crashes Internet Explorer

Filed under: — By Aviran Mordo @ 4:53 pm

Microsoft’s Internet Explorer browser crashes when attacked through a new unpatched vulnerability, security companies warned Friday.

The zero-day bug occurs within the “mshtml” library when a malformed HTML tag with an abnormally large number of script handlers is fed to the browser. According to the researcher who posted the initial description to the Bugtraq security mailing list, attackers can easily crash IE by flooding its buffer.

The researcher, Michal Zalewski, also released proof-of-concept code that crashes the latest IE release on a fully-patched edition of Windows XP SP2.

Symantec noted in an alert to customers of its DeepSight system that its staff had confirmed the proof-of-concept code crashed IE in some, but not all, situations. Also on Friday, rival McAfee released a new signature to anti-virus customers that detects the proof-of-concept exploit.

Because the vulnerability can be exploited by a single malicious HTML tag, IE could be brought to its knees if its user simply surfed to a nasty Web site. Symantec, however, warned that the bug may be even more serious. “Further investigation in the details of exploiting the vulnerability to determine the possibility of code execution are currently under way,” the company’s advisory read.

If that’s the case, IE users may face a new major hijack risk.

There are no known work-arounds, and Microsoft did not immediately respond to questions about its plans for the vulnerability.

Source: informationweek


Leave a Reply

You must have Javascript enabled in order to submit comments.

All fields are optional (except comment).
Some comments may be held for moderation (depends on spam filter) and not show up immediately.
Links will automatically get rel="nofollow" attribute to deter spammers.

Powered by WordPress