Lucene search

K
cveMicrosoftCVE-2009-0075
HistoryFeb 10, 2009 - 10:30 p.m.

CVE-2009-0075

2009-02-1022:30:00
CWE-399
microsoft
web.nvd.nist.gov
98
microsoft
internet explorer
cve-2009-0075
memory corruption
security vulnerability
remote code execution

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.974

Percentile

99.9%

Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka โ€œUninitialized Memory Corruption Vulnerability.โ€

Affected configurations

Nvd
Node
microsoftinternet_explorerMatch7
AND
microsoftwindows_server_2003Match-
OR
microsoftwindows_server_2003Match-sp1
OR
microsoftwindows_server_2003Match-sp1itanium
OR
microsoftwindows_server_2003Match-sp2
OR
microsoftwindows_server_2008
OR
microsoftwindows_server_2008Match-itanium
OR
microsoftwindows_vistaMatch-x64
OR
microsoftwindows_vistaMatch-sp1x64
OR
microsoftwindows_xpMatch-professionalx64
OR
microsoftwindows_xpMatch-sp2
OR
microsoftwindows_xpMatch-sp2professionalx64
OR
microsoftwindows_xpMatch-sp3
VendorProductVersionCPE
microsoftinternet_explorer7cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*
microsoftwindows_server_2003-cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:*:*
microsoftwindows_server_2003-cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:*:*
microsoftwindows_server_2003-cpe:2.3:o:microsoft:windows_server_2003:-:sp1:itanium:*:*:*:*:*
microsoftwindows_server_2003-cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*
microsoftwindows_server_2008-cpe:2.3:o:microsoft:windows_server_2008:-:*:itanium:*:*:*:*:*
microsoftwindows_vista-cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:x64:*
microsoftwindows_vista-cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:x64:*
microsoftwindows_xp-cpe:2.3:o:microsoft:windows_xp:-:*:professional:*:*:*:x64:*
Rows per page:
1-10 of 131

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.974

Percentile

99.9%