Lucene search
HistoryDec 10, 2008 - 2:00 p.m.
CVE-2008-4260
8.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.403 Medium
EPSS
Percentile
97.3%
Microsoft Internet Explorer 7 sometimes attempts to access a deleted object, which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption, aka “Uninitialized Memory Corruption Vulnerability.”
Affected configurations
Node
microsoftinternet_explorerMatch5.01sp4
microsoftwindows_2000sp4
Node
microsoftinternet_explorerMatch6
microsoftwindows_server_2003sp1
ORmicrosoftwindows_server_2003sp1itanium
ORmicrosoftwindows_server_2003sp1x64
ORmicrosoftwindows_server_2003sp2
ORmicrosoftwindows_xpgoldprofessional_x64
ORmicrosoftwindows_xpsp2
ORmicrosoftwindows_xpsp2professional_x64
ORmicrosoftwindows_xpsp3
Node
microsoftinternet_explorerMatch6sp1
microsoftwindows_2000sp4
Node
microsoftinternet_explorerMatch7
microsoftwindows_server_2003sp1
ORmicrosoftwindows_server_2003sp1itanium
ORmicrosoftwindows_server_2003sp1x64
ORmicrosoftwindows_server_2003sp2
ORmicrosoftwindows_server_2008itanium
ORmicrosoftwindows_server_2008x32
ORmicrosoftwindows_server_2008x64
ORmicrosoftwindows_vistagold
ORmicrosoftwindows_vistagoldx64
ORmicrosoftwindows_vistasp1
ORmicrosoftwindows_xpgoldprofessional_x64
ORmicrosoftwindows_xpsp2
ORmicrosoftwindows_xpsp2professional_x64
ORmicrosoftwindows_xpsp3
Related
prion
prion
Memory corruption
2008-12-10 14:00:00
cvelist
cvelist
CVE-2008-4260
2008-12-10 13:33:00
cve
cve
CVE-2008-4260
2008-12-10 14:00:01
checkpoint_advisories
checkpoint_advisories
Internet Explorer URL Cache Memory Corruption (MS08-073; CVE-2008-4260)
2008-12-09 00:00:00
securityvulns
securityvulns
nessus
nessus
MS08-073: Microsoft Internet Explorer Multiple Vulnerabilities (958215)
2008-12-10 00:00:00
openvas
openvas
Cumulative Security Update for Internet Explorer (958215)
2008-12-10 00:00:00
Cumulative Security Update for Internet Explorer (958215)
2008-12-10 00:00:00
8.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
SINGLE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:S/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.403 Medium
EPSS
Percentile
97.3%
Related for NVD:CVE-2008-4260