CVE-2009-1531

EPSS 35.07%
Veröffentlicht 10.06.2009 18:30:00
Zuletzt bearbeitet 16.06.2026 23:07:28
Erkennungen
Login

Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 allows remote attackers to execute arbitrary code via frequent calls to the getElementsByTagName function combined with the creation of an object during reordering of elements, followed by an onreadystatechange event, which triggers an access of an object that (1) was not properly initialized or (2) is deleted, aka "HTML Object Memory Corruption Vulnerability."

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 12

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Microsoft ≫ Internet Explorer Version 7

   Microsoft ≫ Windows Server 2003
   Microsoft ≫ Windows Server 2003 Update sp1
   Microsoft ≫ Windows Server 2003 Update sp1 Edition itanium
   Microsoft ≫ Windows Server 2003 Update sp2
   Microsoft ≫ Windows Server 2008
   Microsoft ≫ Windows Server 2008 Edition 32_bit
   Microsoft ≫ Windows Server 2008 Edition itanium
   Microsoft ≫ Windows Server 2008 Edition x64
   Microsoft ≫ Windows Vista
   Microsoft ≫ Windows Vista Edition x64
   Microsoft ≫ Windows Vista Update sp1
   Microsoft ≫ Windows Vista Version gold
   Microsoft ≫ Windows Xp Edition x64
   Microsoft ≫ Windows Xp Update sp2
   Microsoft ≫ Windows Xp Update sp2 Edition x64
   Microsoft ≫ Windows Xp Update sp3

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	35.07%	0.982

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
NIST	9.3	8.6	10	AV:N/AC:M/Au:N/C:C/I:C/A:C

Es wurden noch keine Informationen zu CWE veröffentlicht.

http://www.us-cert.gov/cas/techalerts/TA09-160A.html

US Government Resource

http://www.vupen.com/english/advisories/2009/1538

Vendor Advisory

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019

http://www.securitytracker.com/id?1022350

http://osvdb.org/54950

http://www.securityfocus.com/archive/1/504216/100/0/threaded

http://www.securityfocus.com/bid/35234

http://www.zerodayinitiative.com/advisories/ZDI-09-039

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6308

https://nvd.nist.gov/vuln/detail/CVE-2009-1531

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2009-1531

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2009-1531

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2009-1531