Lucene search
HistoryOct 14, 2009 - 10:30 a.m.
CVE-2009-2529
microsoft
internet explorer
cve-2009-2529
arbitrary code execution
html component handling vulnerability
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.297 Low
EPSS
Percentile
97.0%
Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not properly handle argument validation for unspecified variables, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka βHTML Component Handling Vulnerability.β
Affected configurations
Node
microsoftinternet_explorerMatch5.01sp4
ORmicrosoftinternet_explorerMatch6sp1
microsoftwindows_2000sp4
Node
microsoftinternet_explorerMatch6
microsoftwindows_server_2003sp2
ORmicrosoftwindows_xpsp3
ORmicrosoftwindows_xpMatch-sp2home
ORmicrosoftwindows_xpMatch-sp2x64
Node
microsoftinternet_explorerMatch7
microsoftwindows_server_2003sp2
ORmicrosoftwindows_server_2008itanium
ORmicrosoftwindows_server_2008x32
ORmicrosoftwindows_server_2008x64
ORmicrosoftwindows_server_2008sp2x64
ORmicrosoftwindows_server_2008Match-sp2itanium
ORmicrosoftwindows_server_2008Match-sp2x86
ORmicrosoftwindows_vista
ORmicrosoftwindows_vistasp1
ORmicrosoftwindows_vistasp2
ORmicrosoftwindows_vistaMatch--x64
ORmicrosoftwindows_vistaMatch-sp1
ORmicrosoftwindows_vistaMatch-sp2
ORmicrosoftwindows_xpsp3
ORmicrosoftwindows_xpMatch-sp2home
ORmicrosoftwindows_xpMatch-sp2x64
Node
microsoftinternet_explorerMatch8
microsoftwindows_7Match-
ORmicrosoftwindows_server_2003sp2
ORmicrosoftwindows_server_2008x32
ORmicrosoftwindows_server_2008x64
ORmicrosoftwindows_server_2008r2itanium
ORmicrosoftwindows_server_2008r2x64
ORmicrosoftwindows_server_2008sp2x64
ORmicrosoftwindows_server_2008Match-sp2x86
ORmicrosoftwindows_vista
ORmicrosoftwindows_vistasp1
ORmicrosoftwindows_vistasp2
ORmicrosoftwindows_vistaMatch--x64
ORmicrosoftwindows_vistaMatch-sp2
ORmicrosoftwindows_xpsp3
ORmicrosoftwindows_xpMatch-sp2x64
Related
cvelist
cvelist
CVE-2009-2529
2009-10-14 10:00:00
seebug
seebug
Microsoft IE HTMLη»δ»Άε€ηθΏη¨δ»£η ζ§θ‘ζΌζ΄οΌMS09-054οΌ
2009-10-19 00:00:00
prion
prion
Design/Logic Flaw
2009-10-14 10:30:00
nvd
nvd
CVE-2009-2529
2009-10-14 10:30:01
checkpoint_advisories
checkpoint_advisories
securityvulns
securityvulns
nessus
nessus
MS09-054: Cumulative Security Update for Internet Explorer (974455)
2009-10-13 00:00:00
openvas
openvas
Microsoft Internet Explorer Multiple Code Execution Vulnerabilities (974455)
2009-10-14 00:00:00
Microsoft Internet Explorer Multiple Code Execution Vulnerabilities (974455)
2009-10-14 00:00:00
mskb
mskb
MS09-054: Cumulative security update for Internet Explorer
2014-06-23 07:27:42
9.3 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.297 Low
EPSS
Percentile
97.0%
Related for CVE-2009-2529