PRIOn knowledge basePRION:CVE-2009-3674Memory corruption
7.6 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.924 High
EPSS
Percentile
98.9%
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka “Uninitialized Memory Corruption Vulnerability,” a different vulnerability than CVE-2009-3671.
| CPE | Name | Operator | Version |
|---|---|---|---|
| internet_explorer | eq | 5.0.1 sp4 | |
| internet_explorer | eq | 6 sp1 | |
| internet_explorer | eq | 6 | |
| internet_explorer | eq | 7 | |
| internet_explorer | eq | 8 | |
| windows_xp | eq | sp2x64 |
Related
7.6 High
AI Score
Confidence
High
9.3 High
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:M/Au:N/C:C/I:C/A:C
0.924 High
EPSS
Percentile
98.9%