CVE-2011-2000

Related Files

Zero Day Initiative Advisory 11-289

Posted Oct 15, 2011

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 11-289 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Internet Explorer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Internet Explorer handles calls to the method swapNode(). When a call to swapNode is issued on an node within a document that has two body nodes, Internet Explorer frees an attribute field for one of the body nodes and then later re-uses the freed field during the node swap. This behavior could result in remote code execution under the context of the current user.

tags | advisory, remote, arbitrary, code execution

advisories | CVE-2011-2000

SHA-256 | fbfbd2d2afca4f61a064175e15ba52c20edd33a6ce5dbc4b75600c0392c49983

Download | Favorite | View