9.3

CVE-2009-0075

Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka "Uninitialized Memory Corruption Vulnerability."

Data is provided by the National Vulnerability Database (NVD)
Microsoft ≫ Internet Explorer Version7
   Microsoft ≫ Windows Server 2003 Version-
   Microsoft ≫ Windows Server 2003 Version- Updatesp1
   Microsoft ≫ Windows Server 2003 Version- Updatesp1 Editionitanium
   Microsoft ≫ Windows Server 2003 Version- Updatesp2
   Microsoft ≫ Windows Server 2008
   Microsoft ≫ Windows Server 2008 Version- Editionitanium
   Microsoft ≫ Windows Vista Version- HwPlatformx64
   Microsoft ≫ Windows Vista Version- Updatesp1 HwPlatformx64
   Microsoft ≫ Windows Xp Version- Editionprofessional HwPlatformx64
   Microsoft ≫ Windows Xp Version- Updatesp2
   Microsoft ≫ Windows Xp Version- Updatesp2 Editionprofessional HwPlatformx64
   Microsoft ≫ Windows Xp Version- Updatesp3
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 84.85% 0.993
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 9.3 8.6 10
AV:N/AC:M/Au:N/C:C/I:C/A:C
http://www.us-cert.gov/cas/techalerts/TA09-041A.html
Third Party Advisory
US Government Resource
http://www.securityfocus.com/bid/33627
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/8077
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/8079
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/8080
Third Party Advisory
VDB Entry
https://www.exploit-db.com/exploits/8082
Third Party Advisory
VDB Entry