9.3

CVE-2009-1530

EPSS 69.92%
Veröffentlicht 10.06.2009 18:30:00
Zuletzt bearbeitet 09.04.2025 00:30:58
Quelle secure@microsoft.com
Teams Watchlist Login
Unerledigt Login

Use-after-free vulnerability in Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 allows remote attackers to execute arbitrary code by repeatedly adding HTML document nodes and calling event handlers, which triggers an access of an object that (1) was not properly initialized or (2) is deleted, aka "HTML Objects Memory Corruption Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 11

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Internet Explorer Version6

   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2003 Updatesp1
   Microsoft ≫ Windows Server 2003 Updatesp1 Editionitanium
   Microsoft ≫ Windows Server 2003 Updatesp2
   Microsoft ≫ Windows Xp Editionpro_x64
   Microsoft ≫ Windows Xp Updatesp2
   Microsoft ≫ Windows Xp Updatesp2 Editionpro_x64
   Microsoft ≫ Windows Xp Updatesp3

Microsoft ≫ Internet Explorer Version7

   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2003 Updatesp1
   Microsoft ≫ Windows Server 2003 Updatesp1 Editionitanium
   Microsoft ≫ Windows Server 2003 Updatesp2
   Microsoft ≫ Windows Server 2008
   Microsoft ≫ Windows Server 2008 Edition32_bit
   Microsoft ≫ Windows Server 2008 Editionitanium
   Microsoft ≫ Windows Server 2008 Editionx64
   Microsoft ≫ Windows Vista
   Microsoft ≫ Windows Vista Editionx64
   Microsoft ≫ Windows Vista Updatesp1
   Microsoft ≫ Windows Vista Versiongold
   Microsoft ≫ Windows Xp Editionx64
   Microsoft ≫ Windows Xp Updatesp2
   Microsoft ≫ Windows Xp Updatesp2 Editionx64
   Microsoft ≫ Windows Xp Updatesp3

Microsoft ≫ Internet Explorer Version6 Updatesp1

Microsoft ≫ Windows 2000 Updatesp4

Microsoft ≫ Internet Explorer Version5.01

Microsoft ≫ Windows 2000 Updatesp4

Microsoft ≫ Internet Explorer Version5.01 Updatesp4

Microsoft ≫ Windows 2000 Updatesp4

Microsoft ≫ Internet Explorer Version8

   Microsoft ≫ Windows Server 2003 Updatesp2
   Microsoft ≫ Windows Server 2008 Editionx32
   Microsoft ≫ Windows Server 2008 Editionx64
   Microsoft ≫ Windows Server 2008 Updatesp2 Editionx64
   Microsoft ≫ Windows Server 2008 Version- Updatesp2 Editionx86
   Microsoft ≫ Windows Vista
   Microsoft ≫ Windows Vista Editionx64
   Microsoft ≫ Windows Vista Updatesp1
   Microsoft ≫ Windows Vista Updatesp2
   Microsoft ≫ Windows Vista Versionsp1
   Microsoft ≫ Windows Vista Versionsp2
   Microsoft ≫ Windows Xp Version-
   Microsoft ≫ Windows Xp Versionsp3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	69.92%	0.986

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

http://www.us-cert.gov/cas/techalerts/TA09-160A.html

US Government Resource

http://www.vupen.com/english/advisories/2009/1538

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019

http://www.securitytracker.com/id?1022350

http://osvdb.org/54949

http://www.securityfocus.com/archive/1/504209/100/0/threaded

http://www.zerodayinitiative.com/advisories/ZDI-09-038

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6294

https://nvd.nist.gov/vuln/detail/CVE-2009-1530

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-1530

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-1530

EUVD