Lucene search

K
cve[email protected]CVE-2008-2254
HistoryAug 13, 2008 - 12:42 p.m.

CVE-2008-2254

2008-08-1312:42:00
CWE-399
web.nvd.nist.gov
23
cve-2008-2254
microsoft
internet explorer
html
memory corruption
vulnerability
remote attack

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.793 High

EPSS

Percentile

98.3%

Microsoft Internet Explorer 6 and 7 accesses uninitialized memory, which allows remote attackers to cause a denial of service (crash) and execute arbitrary code via unknown vectors, aka β€œHTML Object Memory Corruption Vulnerability.”

Affected configurations

NVD
Node
microsoftinternet_explorerMatch6
OR
microsoftinternet_explorerMatch6sp1
OR
microsoftinternet_explorerMatch6sp2
OR
microsoftinternet_explorerMatch7

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.4 High

AI Score

Confidence

Low

0.793 High

EPSS

Percentile

98.3%