View Definition
| Definition Id: oval:org.mitre.oval:def:5329 | Version: 3 Last Modified: 2007-01-13 | ||
| Title: | IE v6.0,SP1 Install Engine Buffer Overflow | ||
| Description: | Integer overflow in the Install Engine (inseng.dll) for Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via a malicious website or HTML email with a long .CAB file name, which triggers the integer overflow when calculating a buffer length and leads to a heap-based buffer overflow. | ||
| Family: | windows | Class: | vulnerability |
| Status: | ACCEPTED | Reference(s): |
CVE-2004-0216
|
| Platform(s): | Microsoft Windows ME Microsoft Windows NT Microsoft Windows 2000 Microsoft Windows XP |
Product(s): | Microsoft Internet Explorer |
| Definition Synopsis: | |||
|
|||
