TUCoPS :: Browsers :: tb11266.htm

TUCoPS :: Browsers :: tb11266.htm
Microsoft Internet Explorer Prototype Dereference Code Execution Vulnerability
ZDI-07-038: Microsoft Internet Explorer Prototype Dereference Code Execution Vulnerability ZDI-07-038: Microsoft Internet Explorer Prototype Dereference Code Execution Vulnerability

WkRJLTA3LTAzODogTWljcm9zb2Z0IEludGVybmV0IEV4cGxvcmVyIFByb3RvdHlwZSBEZXJlZmVy
ZW5jZSBDb2RlDQogICAgICAgICAgICBFeGVjdXRpb24gVnVsbmVyYWJpbGl0eQ0KaHR0cDovL3d3
dy56ZXJvZGF5aW5pdGlhdGl2ZS5jb20vYWR2aXNvcmllcy9aREktMDctMDM4Lmh0bWwNCkp1bmUg
MTIsIDIwMDcNCg0KLS0gQ1ZFIElEOg0KQ1ZFLTIwMDctMTc1MQ0KDQotLSBBZmZlY3RlZCBWZW5k
b3I6DQpNaWNyb3NvZnQNCg0KLS0gQWZmZWN0ZWQgUHJvZHVjdHM6DQpJbnRlcm5ldCBFeHBsb3Jl
ciA2LngNCkludGVybmV0IEV4cGxvcmVyIDcueA0KDQotLSBUaXBwaW5nUG9pbnQoVE0pIElQUyBD
dXN0b21lciBQcm90ZWN0aW9uOg0KVGlwcGluZ1BvaW50IElQUyBjdXN0b21lcnMgaGF2ZSBiZWVu
IHByb3RlY3RlZCBhZ2FpbnN0IHRoaXMNCnZ1bG5lcmFiaWxpdHkgc2luY2UgT2N0b2JlciAxMCwg
MjAwNiBieSBEaWdpdGFsIFZhY2NpbmUgcHJvdGVjdGlvbg0KZmlsdGVyIElEIDQ3NjEuIEZvciBm
dXJ0aGVyIHByb2R1Y3QgaW5mb3JtYXRpb24gb24gdGhlIFRpcHBpbmdQb2ludCBJUFM6DQoNCiAg
ICBodHRwOi8vd3d3LnRpcHBpbmdwb2ludC5jb20gDQoNCi0tIFZ1bG5lcmFiaWxpdHkgRGV0YWls
czoNClRoaXMgdnVsbmVyYWJpbGl0eSBhbGxvd3MgYXR0YWNrZXJzIHRvIGV4ZWN1dGUgYXJiaXRy
YXJ5IGNvZGUgb24NCnZ1bG5lcmFibGUgaW5zdGFsbGF0aW9ucyBvZiBNaWNyb3NvZnQgSW50ZXJu
ZXQgRXhwbG9yZXIuIFVzZXINCmludGVyYWN0aW9uIGlzIHJlcXVpcmVkIHRvIGV4cGxvaXQgdGhp
cyB2dWxuZXJhYmlsaXR5IGluIHRoYXQgdGhlDQp0YXJnZXQgbXVzdCB2aXNpdCBhIG1hbGljaW91
cyBwYWdlLg0KDQpUaGUgZmxhdyBpcyBzcGVjaWZpY2FsbHkgZXhwb3NlZCB3aGVuIGEgcHJvdG90
eXBlIHZhcmlhYmxlIHBvaW50cyB0byBhDQp0YWJsZSBjZWxsIGFuZCB0aGVuIHRoYXQgdGFibGUg
Y2VsbCBpcyByZW1vdmVkLiBUaGlzIHJlc3VsdHMgaW4gYW4NCmludmFsaWQgcG9pbnRlciBkZXJl
ZmVyZW5jZSB3aGljaCBjYW4gYmUgbGV2ZXJhZ2VkIHRvIHJlc3VsdCBpbg0KYXJiaXRyYXJ5IGNv
ZGUgZXhlY3V0aW9uLg0KDQotLSBWZW5kb3IgUmVzcG9uc2U6DQpNaWNyb3NvZnQgaGFzIGlzc3Vl
ZCBhbiB1cGRhdGUgdG8gY29ycmVjdCB0aGlzIHZ1bG5lcmFiaWxpdHkuIE1vcmUNCmRldGFpbHMg
Y2FuIGJlIGZvdW5kIGF0Og0KDQogICAgaHR0cDovL3d3dy5taWNyb3NvZnQuY29tL3RlY2huZXQv
c2VjdXJpdHkvYnVsbGV0aW4vbXMwNy0wMzMubXNweA0KDQotLSBEaXNjbG9zdXJlIFRpbWVsaW5l
Og0KMjAwNi4xMC4xMCAtIERpZ2l0YWwgVmFjY2luZSByZWxlYXNlZCB0byBUaXBwaW5nUG9pbnQg
Y3VzdG9tZXJzDQoyMDA3LjAyLjE1IC0gVnVsbmVyYWJpbGl0eSByZXBvcnRlZCB0byB2ZW5kb3IN
CjIwMDcuMDYuMTIgLSBDb29yZGluYXRlZCBwdWJsaWMgcmVsZWFzZSBvZiBhZHZpc29yeQ0KDQot
LSBDcmVkaXQ6DQpUaGlzIHZ1bG5lcmFiaWxpdHkgd2FzIGRpc2NvdmVyZWQgYnkgU2FtIFRob21h
cy4NCg0KLS0gQWJvdXQgdGhlIFplcm8gRGF5IEluaXRpYXRpdmUgKFpESSk6DQpFc3RhYmxpc2hl
ZCBieSBUaXBwaW5nUG9pbnQsIGEgZGl2aXNpb24gb2YgM0NvbSwgVGhlIFplcm8gRGF5IEluaXRp
YXRpdmUNCihaREkpIHJlcHJlc2VudHMgYSBiZXN0LW9mLWJyZWVkIG1vZGVsIGZvciByZXdhcmRp
bmcgc2VjdXJpdHkNCnJlc2VhcmNoZXJzIGZvciByZXNwb25zaWJseSBkaXNjbG9zaW5nIGRpc2Nv
dmVyZWQgdnVsbmVyYWJpbGl0aWVzLg0KDQpSZXNlYXJjaGVycyBpbnRlcmVzdGVkIGluIGdldHRp
bmcgcGFpZCBmb3IgdGhlaXIgc2VjdXJpdHkgcmVzZWFyY2gNCnRocm91Z2ggdGhlIFpESSBjYW4g
ZmluZCBtb3JlIGluZm9ybWF0aW9uIGFuZCBzaWduLXVwIGF0Og0KDQogICAgaHR0cDovL3d3dy56
ZXJvZGF5aW5pdGlhdGl2ZS5jb20NCg0KVGhlIFpESSBpcyB1bmlxdWUgaW4gaG93IHRoZSBhY3F1
aXJlZCB2dWxuZXJhYmlsaXR5IGluZm9ybWF0aW9uIGlzIHVzZWQuDQozQ29tIGRvZXMgbm90IHJl
LXNlbGwgdGhlIHZ1bG5lcmFiaWxpdHkgZGV0YWlscyBvciBhbnkgZXhwbG9pdCBjb2RlLg0KSW5z
dGVhZCwgdXBvbiBub3RpZnlpbmcgdGhlIGFmZmVjdGVkIHByb2R1Y3QgdmVuZG9yLCAzQ29tIHBy
b3ZpZGVzIGl0cw0KY3VzdG9tZXJzIHdpdGggemVybyBkYXkgcHJvdGVjdGlvbiB0aHJvdWdoIGl0
cyBpbnRydXNpb24gcHJldmVudGlvbg0KdGVjaG5vbG9neS4gRXhwbGljaXQgZGV0YWlscyByZWdh
cmRpbmcgdGhlIHNwZWNpZmljcyBvZiB0aGUNCnZ1bG5lcmFiaWxpdHkgYXJlIG5vdCBleHBvc2Vk
IHRvIGFueSBwYXJ0aWVzIHVudGlsIGFuIG9mZmljaWFsIHZlbmRvcg0KcGF0Y2ggaXMgcHVibGlj
bHkgYXZhaWxhYmxlLiBGdXJ0aGVybW9yZSwgd2l0aCB0aGUgYWx0cnVpc3RpYyBhaW0gb2YNCmhl
bHBpbmcgdG8gc2VjdXJlIGEgYnJvYWRlciB1c2VyIGJhc2UsIDNDb20gcHJvdmlkZXMgdGhpcyB2
dWxuZXJhYmlsaXR5DQppbmZvcm1hdGlvbiBjb25maWRlbnRpYWxseSB0byBzZWN1cml0eSB2ZW5k
b3JzIChpbmNsdWRpbmcgY29tcGV0aXRvcnMpDQp3aG8gaGF2ZSBhIHZ1bG5lcmFiaWxpdHkgcHJv
dGVjdGlvbiBvciBtaXRpZ2F0aW9uIHByb2R1Y3QuDQoNCkNPTkZJREVOVElBTElUWSBOT1RJQ0U6
IFRoaXMgZS1tYWlsIG1lc3NhZ2UsIGluY2x1ZGluZyBhbnkgYXR0YWNobWVudHMsCmlzIGJlaW5n
IHNlbnQgYnkgM0NvbSBmb3IgdGhlIHNvbGUgdXNlIG9mIHRoZSBpbnRlbmRlZCByZWNpcGllbnQo
cykgYW5kCm1heSBjb250YWluIGNvbmZpZGVudGlhbCwgcHJvcHJpZXRhcnkgYW5kL29yIHByaXZp
bGVnZWQgaW5mb3JtYXRpb24uCkFueSB1bmF1dGhvcml6ZWQgcmV2aWV3LCB1c2UsIGRpc2Nsb3N1
cmUgYW5kL29yIGRpc3RyaWJ1dGlvbiBieSBhbnkgCnJlY2lwaWVudCBpcyBwcm9oaWJpdGVkLiAg
SWYgeW91IGFyZSBub3QgdGhlIGludGVuZGVkIHJlY2lwaWVudCwgcGxlYXNlCmRlbGV0ZSBhbmQv
b3IgZGVzdHJveSBhbGwgY29waWVzIG9mIHRoaXMgbWVzc2FnZSByZWdhcmRsZXNzIG9mIGZvcm0g
YW5kCmFueSBpbmNsdWRlZCBhdHRhY2htZW50cyBhbmQgbm90aWZ5IDNDb20gaW1tZWRpYXRlbHkg
YnkgY29udGFjdGluZyB0aGUKc2VuZGVyIHZpYSByZXBseSBlLW1haWwgb3IgZm9yd2FyZGluZyB0
byAzQ29tIGF0IHBvc3RtYXN0ZXJAM2NvbS5jb20uIAo