Memory Corruption Vulnerabilities Target IE 6 & 7

This report deconstructs an Internet Explorer client-side attack that combines two use‑after‑free vulnerabilities (CVE‑2010‑0806 and CVE‑2010‑3962). It presents de‑obfuscated JavaScript, explains version checks, heap‑spray and shellcode usage, demonstrates how the two exploits are combined to increase success, and highlights the malicious domain dxcdfghg.com hosting exploit pages and other malicious sites.