Vulners
Lucene search
MS Internet Explorer 6 - 8 Content-Encoding Memory Corruption
| Reporter | Title | Published | Views | Family All 23 |
|---|---|---|---|---|
 | Microsoft Internet Explorer 5,6,7 memory corruption PoC | 15 Oct 200900:00 | – | zdt |
 | CVE-2009-1547 | 13 Oct 200900:00 | – | circl |
 | Internet Explorer Data Stream Header Corruption (MS09-054; CVE-2009-1547) | 13 Oct 200900:00 | – | checkpoint_advisories |
 | CVE-2009-1547 | 14 Oct 200910:00 | – | cve |
 | CVE-2009-1547 | 14 Oct 200910:00 | – | cvelist |
 | Microsoft Internet Explorer 5/6/7 - Memory Corruption (MS09-054) | 15 Oct 200900:00 | – | exploitdb |
 | Microsoft Internet Explorer 567 - Memory Corruption (MS09-054) | 15 Oct 200900:00 | – | exploitpack |
 | MS09-054: Cumulative security update for Internet Explorer | 23 Jun 201407:27 | – | mskb |
 | CVE-2009-1547 | 14 Oct 200910:30 | – | nvd |
 | Microsoft Internet Explorer Multiple Code Execution Vulnerabilities (974455) | 14 Oct 200900:00 | – | openvas |
10
MSIE Content-Encoding: deflate memory corruption vulnerability
(a.k.a. MSRC 8769, MS09-054, CVE-2009-1547, “Data Stream Header Corruption Vulnerabilityâ€)
Microsoft fixed a bug in Internet Explorer’s “Content-Encoding:deflate†implementation. Here are two HTTP replies that trigger the bug:
HTTP/.\nContent-Encoding:deflate\r\t\n\r\n\x20\x20
HTTP \nContent-Encoding:deflate\nContent-Range:\n\nâ€
The bug allows memory corruption, which can be exploited to execute arbitrary code. The big surprise (to me at least) is that nobody seems to have found this before even though it’s fairly easy to trigger.
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
15 Oct 2009 00:00Current
6.5Medium risk
Vulners AI Score6.5
EPSS0.29685