Memory corruption

2009-10-1410:30:00

PRIOn knowledge base

www.prio-n.com

7.7 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.932 High

EPSS

Percentile

99.0%

JSON

Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka “Uninitialized Memory Corruption Vulnerability,” a different vulnerability than CVE-2009-2531.

CPENameOperatorVersion
internet_explorereq5.1 sp4
internet_explorereq6 sp1
internet_explorereq6
internet_explorereq7
internet_explorereq8
windows_server_2008eq sp2itanium
windows_server_2008eq sp2x86
windows_server_2008eq sp2x86
windows_vistaeq- sp1
windows_vistaeq- sp2

Name	Operator	Version
internet_explorer	eq	5.1 sp4
internet_explorer	eq	6 sp1
internet_explorer	eq	6
internet_explorer	eq	7
internet_explorer	eq	8
windows_server_2008	eq	sp2itanium
windows_server_2008	eq	sp2x86
windows_server_2008	eq	sp2x86
windows_vista	eq	- sp1
windows_vista	eq	- sp2