CVE-2011-0346 in Internet Explorer
Zusammenfassung (Englisch)
Use-after-free vulnerability in the ReleaseInterface function in MSHTML.DLL in Microsoft Internet Explorer 6, 7, and 8 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to the DOM implementation and the BreakAASpecial and BreakCircularMemoryReferences functions, as demonstrated by cross_fuzz, aka "MSHTML Memory Corruption Vulnerability."
VulDB is the best source for vulnerability data and more expert information about this specific topic.
Reservieren
07.01.2011
Veröffentlichung
07.01.2011
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 55988 | Microsoft Internet Explorer MSHTML.DLL ReleaseInterface Denial of Service | 399 | Nicht definiert | Offizieller Fix | CVE-2011-0346 |