Lucene search
HistoryDec 10, 2008 - 2:00 p.m.
CVE-2008-4260
microsoft
internet explorer
cve-2008-4260
uninitialized memory
memory corruption
remote code execution
security vulnerability
8.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.403 Medium
EPSS
Percentile
97.3%
Microsoft Internet Explorer 7 sometimes attempts to access a deleted object, which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption, aka “Uninitialized Memory Corruption Vulnerability.”
Affected configurations
Node
microsoftinternet_explorerMatch5.01sp4
microsoftwindows_2000sp4
Node
microsoftinternet_explorerMatch6
microsoftwindows_server_2003sp1
ORmicrosoftwindows_server_2003sp1itanium
ORmicrosoftwindows_server_2003sp1x64
ORmicrosoftwindows_server_2003sp2
ORmicrosoftwindows_xpgoldprofessional_x64
ORmicrosoftwindows_xpsp2
ORmicrosoftwindows_xpsp2professional_x64
ORmicrosoftwindows_xpsp3
Node
microsoftinternet_explorerMatch6sp1
microsoftwindows_2000sp4
Node
microsoftinternet_explorerMatch7
microsoftwindows_server_2003sp1
ORmicrosoftwindows_server_2003sp1itanium
ORmicrosoftwindows_server_2003sp1x64
ORmicrosoftwindows_server_2003sp2
ORmicrosoftwindows_server_2008itanium
ORmicrosoftwindows_server_2008x32
ORmicrosoftwindows_server_2008x64
ORmicrosoftwindows_vistagold
ORmicrosoftwindows_vistagoldx64
ORmicrosoftwindows_vistasp1
ORmicrosoftwindows_xpgoldprofessional_x64
ORmicrosoftwindows_xpsp2
ORmicrosoftwindows_xpsp2professional_x64
ORmicrosoftwindows_xpsp3
| CPE | Name | Operator | Version |
|---|---|---|---|
| microsoft:internet_explorer | microsoft internet explorer | eq | 5.01 |
Related
checkpoint_advisories
checkpoint_advisories
Internet Explorer URL Cache Memory Corruption (MS08-073; CVE-2008-4260)
2008-12-09 00:00:00
cvelist
cvelist
CVE-2008-4260
2008-12-10 13:33:00
prion
prion
Memory corruption
2008-12-10 14:00:00
nvd
nvd
CVE-2008-4260
2008-12-10 14:00:01
openvas
openvas
Cumulative Security Update for Internet Explorer (958215)
2008-12-10 00:00:00
Cumulative Security Update for Internet Explorer (958215)
2008-12-10 00:00:00
nessus
nessus
MS08-073: Microsoft Internet Explorer Multiple Vulnerabilities (958215)
2008-12-10 00:00:00
securityvulns
securityvulns
8.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.403 Medium
EPSS
Percentile
97.3%
Related for CVE-2008-4260