Microsoft Windows Common Control Tabstrip Memory Access Error

Strike ID:
E12-06001
CVSS:
9.3 (AV:N/AC:M/Au:N/C:C/I:C/A:C)
False Positive:
f
Variants:
1
Year:
2012

Description

This strike exploits a vulnerability in Microsoft Windows Common Control MSCOMCTL.TabStrip. If an overly large length value is passed to a function, during the tab handling loop, the function will fail, and the loop will call a function pointer that is not properly intitalized, resultling in a memory access error.

CVE

Bid