CVE-2009-1530

🗓️ 10 Jun 2009 18:00:00Reported by microsoftType

Use-after-free vulnerability in Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 allows remote attackers to execute arbitrary code by repeatedly adding HTML document nodes and calling event handlers, which triggers an access of an object that (1) was not properly initialized or (2) is deleted, aka "HTML Objects Memory Corruption Vulnerability.

Reporter	Title	Published	Views	Family All 12
Check Point Advisories	Internet Explorer Multiple Events Improper Reference Counting (MS09-019; CVE-2009-1530)	9 Jun 200900:00	–	checkpoint_advisories
CVE	CVE-2009-1530	10 Jun 200918:00	–	cve
NVD	CVE-2009-1530	10 Jun 200918:30	–	nvd
OpenVAS	Cumulative Security Update for Internet Explorer (969897)	10 Jun 200900:00	–	openvas
OpenVAS	Cumulative Security Update for Internet Explorer (969897)	10 Jun 200900:00	–	openvas
Prion	Memory corruption	10 Jun 200918:30	–	prion
Positive Technologies	PT-2009-4027 · Microsoft · Vista +5	10 Jun 200900:00	–	ptsecurity
securityvulns	ZDI-09-038: Microsoft Internet Explorer Event Handler Memory Corruption Vulnerability	11 Jun 200900:00	–	securityvulns
securityvulns	Microsoft Internet Explorer multiple security vulnerabilities	11 Jun 200900:00	–	securityvulns
Tenable Nessus	MS09-019: Cumulative Security Update for Internet Explorer (969897)	10 Jun 200900:00	–	nessus

Source	Link
osvdb	www.osvdb.org/54949
securitytracker	www.securitytracker.com/id
us-cert	www.us-cert.gov/cas/techalerts/TA09-160A.html
oval	www.oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6294
vupen	www.vupen.com/english/advisories/2009/1538
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-09-038
docs	www.docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019
securityfocus	www.securityfocus.com/archive/1/504209/100/0/threaded

12 Oct 2018 19:57Current

7.4High risk

Vulners AI Score7.4

EPSS0.62306