Intrusion Prevention

MS.IE.CSS.Tag.Code.Execution

Description

This indicates an attack attempt against a remote code execution vulnerability in Microsoft Internet Explorer 6.
The vulnerability is caused by improper handling of maliciously-crafted Cascading Style Sheets (CSS) tags that could trigger a memory corruption and allow arbitrary code execution.

Affected Products

Internet Explorer 6

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Apply patch, available from the web site:
http://www.microsoft.com/technet/security/bulletin/ms07-033.mspx

CVE References

CVE-2007-1750