Security Advisory
CVE-2008-1442
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Heap-based buffer overflow in the substringData method in Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code, related to an unspecified manipulation of a DOM object before a call to this method, aka the "HTML Objects Memory Corruption Vulnerability."