Microsoft Internet Explorer CSS “clip” Attribute Memory Corruption / Exploit

A vulnerability has been identified in Microsoft Internet Explorer, which could be exploited by remote attackers to take complete control of a vulnerable system. This issue is caused due to an invalid flag reference within the “mshtml.dll” module when processing a Cascading Style Sheets (CSS) “clip” attribute with a specific position, which could allow remote attackers to crash an affected browser or arbitrary code via a specially crafted web page.

The vulnerability is being exploited in the wild.

VUPEN has confirmed this vulnerability with Microsoft Internet Explorer 8, 7, and 6 on Windows XP SP3.