CVE-2008-4844

🗓️ 11 Dec 2008 15:00:00Reported by microsoftType

cve🔗 web.nvd.nist.gov👁 271 Views🌐 WEB

Use-after-free vulnerability in CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explore

Reporter	Title	Published	Views	Family All 28
Circl	CVE-2008-4844	10 Dec 200800:00	–	circl
Check Point Advisories	Internet Explorer XML Processing Memory Corruption (MS08-078; CVE-2008-4844)	11 Dec 200800:00	–	checkpoint_advisories
Check Point Advisories	Microsoft Internet Explorer Data Binding Memory Corruption - Ver2 (CVE-2008-4844)	26 Mar 201500:00	–	checkpoint_advisories
Cvelist	CVE-2008-4844	11 Dec 200815:00	–	cvelist
Exploit DB	Microsoft Internet Explorer - Data Binding Memory Corruption (MS08-078) (Metasploit)	20 Sep 201000:00	–	exploitdb
Microsoft KB	MS08-078: Security update for Internet Explorer	17 Apr 201818:59	–	mskb
canvas	Immunity Canvas: MS08_078	11 Dec 200815:30	–	canvas
Metasploit	MS08-078 Microsoft Internet Explorer Data Binding Memory Corruption	10 Feb 201020:41	–	metasploit
NVD	CVE-2008-4844	11 Dec 200815:30	–	nvd
OpenVAS	Ubuntu USN-698-1 (nagios)	5 Jun 200900:00	–	openvas

NVD

Node

Source	Link
scanw	www.scanw.com/blog/archives/303
us-cert	www.us-cert.gov/cas/techalerts/TA08-352A.html
securitytracker	www.securitytracker.com/id
exploit-db	www.exploit-db.com/exploits/7403
exploit-db	www.exploit-db.com/exploits/7477
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6007
breakingpointsystems	www.breakingpointsystems.com/community/blog/patch-tuesdays-and-drive-by-sundays
vupen	www.vupen.com/english/advisories/2008/3391
securityfocus	www.securityfocus.com/bid/32721
kb	www.kb.cert.org/vuls/id/493881

Parameter	Position	Path	Description	CWE
token	query param	generic-<timestamp>.dll	Use-after-free in Internet Explorer data binding exploited via crafted HTML/XML invoking DLL payload (CVE-2008-4844).	CWE-399

23 Apr 2026 00:35Current

7.5High risk

Vulners AI Score7.5

CVSS 29.3

EPSS0.82846