Microsoft Internet Explorer 5.01 SP4 and 6 SP1 does not properly validate parameters during calls to navigation methods, which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption, aka "Parameter Validation Memory Corruption Vulnerability."
| Software | From | Fixed in |
|---|---|---|
| microsoft / internet_explorer | 5.01-sp4 | 5.01-sp4.x |
| microsoft / internet_explorer | 6 | 6.x |
| microsoft / internet_explorer | 6-sp1 | 6-sp1.x |
| microsoft / internet_explorer | 7 | 7.x |