Microsoft Internet Explorer Select Element CVE-2011-1999 Memory Corruption Vulnerability
BID:49964
Info
Microsoft Internet Explorer Select Element CVE-2011-1999 Memory Corruption Vulnerability
| Bugtraq ID: | 49964 |
| Class: | Unknown |
| CVE: |
CVE-2011-1999 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 11 2011 12:00AM |
| Updated: | Feb 28 2012 08:30PM |
| Credit: | Ivan Fratric, working with TippingPoint's Zero Day Initiative |
| Vulnerable: |
Microsoft Internet Explorer 8 Avaya Messaging Application Server 5.2 Avaya Messaging Application Server 5 Avaya Messaging Application Server 4 Avaya Meeting Exchange - Webportal 0 Avaya Meeting Exchange - Web Conferencing Server 0 Avaya Meeting Exchange - Recording Server 0 Avaya Meeting Exchange - Client Registration Server 0 Avaya Meeting Exchange 5.0 .0.52 Avaya Meeting Exchange 5.2 SP2 Avaya Meeting Exchange 5.2 SP1 Avaya Meeting Exchange 5.2 Avaya Meeting Exchange 5.1 SP1 Avaya Meeting Exchange 5.1 Avaya Meeting Exchange 5.0 SP2 Avaya Meeting Exchange 5.0 SP1 Avaya Meeting Exchange 5.0 Avaya Communication Server 1000 Telephony Manager 4.0 Avaya Communication Server 1000 Telephony Manager 3.0 Avaya CallPilot 5.0 Avaya CallPilot 4.0 Avaya Aura Conferencing 6.0 Standard |
| Not Vulnerable: | |
Discussion
Microsoft Internet Explorer Select Element CVE-2011-1999 Memory Corruption Vulnerability
Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability.
Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks may cause denial-of-service conditions.
Microsoft Internet Explorer is prone to a remote memory-corruption vulnerability.
Successful exploits will allow an attacker to run arbitrary code in the context of the user running the application. Failed attacks may cause denial-of-service conditions.
Exploit / POC
Microsoft Internet Explorer Select Element CVE-2011-1999 Memory Corruption Vulnerability
The researcher has released notes along with the following exploit code. Please see the references for additional information on this exploit.
The researcher has released notes along with the following exploit code. Please see the references for additional information on this exploit.
Solution / Fix
Microsoft Internet Explorer Select Element CVE-2011-1999 Memory Corruption Vulnerability
Solution:
The vendor has released an advisory and updates. Please see the references for details.
Microsoft Internet Explorer 8
Solution:
The vendor has released an advisory and updates. Please see the references for details.
Microsoft Internet Explorer 8
-
Microsoft Cumulative Security Update for Internet Explorer 8 for Windows Server 2003 (KB2586448)
http://www.microsoft.com/downloads/details.aspx?familyid=14ef20d4-3530 -49b2-91b7-d278d9098023 -
Microsoft Cumulative Security Update for Internet Explorer 8 for Windows Server 2003 x64 Edition (KB2586448)
http://www.microsoft.com/downloads/details.aspx?familyid=b35c95f5-30b0 -43a9-aa6a-6db63cab0dcb -
Microsoft Cumulative Security Update for Internet Explorer 8 for Windows XP (KB2586448)
http://www.microsoft.com/downloads/details.aspx?familyid=a911b5b0-5e46 -4a37-83e7-595e20585c56 -
Microsoft Cumulative Security Update for Internet Explorer 8 for Windows XP x64 Edition (KB2586448)
http://www.microsoft.com/downloads/details.aspx?familyid=67ebf641-1341 -4642-96ba-bab5446d7b5d -
Microsoft Cumulative Security Update for Internet Explorer 8 in Windows 7 (KB2586448)
http://www.microsoft.com/downloads/details.aspx?familyid=4de175be-bbb7 -4912-ba4e-d6fe96606c9e -
Microsoft Cumulative Security Update for Internet Explorer 8 in Windows 7 x64 Edition (KB2586448)
http://www.microsoft.com/downloads/details.aspx?familyid=16fd238e-6f65 -4d38-88ae-2689817588e1 -
Microsoft Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 (KB2586448)
http://www.microsoft.com/downloads/details.aspx?familyid=bd144435-1afd -4d6e-a100-fbd613eee409 -
Microsoft Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 R2 for Itanium-based Syste
http://www.microsoft.com/downloads/details.aspx?familyid=2676597e-c1d4 -4397-8dc4-515ce3d0c5fd -
Microsoft Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 R2 x64 Edition (KB2586448)
http://www.microsoft.com/downloads/details.aspx?familyid=8435781e-0f77 -41d0-abb9-9b70f5b02d33 -
Microsoft Cumulative Security Update for Internet Explorer 8 in Windows Server 2008 x64 Edition (KB2586448)
http://www.microsoft.com/downloads/details.aspx?familyid=b0c4949f-bce0 -4255-a5f2-cf5ecf7416da -
Microsoft Cumulative Security Update for Internet Explorer 8 in Windows Vista (KB2586448)
http://www.microsoft.com/downloads/details.aspx?familyid=76c8124e-81b9 -4a6a-bd53-fbdaf45189aa -
Microsoft Cumulative Security Update for Internet Explorer 8 in Windows Vista x64 Edition (KB2586448)
http://www.microsoft.com/downloads/details.aspx?familyid=3454940c-acc2 -4e09-8154-075b4be1b697