CVE-2009-0075

Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka "Uninitialized Memory Corruption Vulnerability."

CVSS v2.0 9.3 HIGH

9.3^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:M/Au:N/C:C/I:C/A:C

Exploitability : 8.6 / Impact : 10.0

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://osvdb.org/51839	Broken Link
http://www.securityfocus.com/bid/33627	Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA09-041A.html	Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2009/0389	Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-09-011/	Third Party Advisory VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-002	Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6000	Third Party Advisory
https://www.exploit-db.com/exploits/8077	Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/8079	Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/8080	Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/8082	Third Party Advisory VDB Entry
http://osvdb.org/51839	Broken Link
http://www.securityfocus.com/bid/33627	Third Party Advisory VDB Entry
http://www.us-cert.gov/cas/techalerts/TA09-041A.html	Third Party Advisory US Government Resource
http://www.vupen.com/english/advisories/2009/0389	Vendor Advisory
http://www.zerodayinitiative.com/advisories/ZDI-09-011/	Third Party Advisory VDB Entry
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-002	Patch Vendor Advisory
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6000	Third Party Advisory
https://www.exploit-db.com/exploits/8077	Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/8079	Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/8080	Third Party Advisory VDB Entry
https://www.exploit-db.com/exploits/8082	Third Party Advisory VDB Entry

Configurations

Configuration 1 (hide)

AND

cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*

OR	cpe:2.3:o:microsoft:windows_server_2003:-:::::::*
	cpe:2.3:o:microsoft:windows_server_2003:-:sp1::::::
	cpe:2.3:o:microsoft:windows_server_2003:-:sp1:itanium:::::*
	cpe:2.3:o:microsoft:windows_server_2003:-:sp2::::::
	cpe:2.3:o:microsoft:windows_server_2008::::::::
	cpe:2.3:o:microsoft:windows_server_2008:-::itanium:::::
	cpe:2.3:o:microsoft:windows_vista:-::::::x64:
	cpe:2.3:o:microsoft:windows_vista:-:sp1:::::x64:*
	cpe:2.3:o:microsoft:windows_xp:-::professional::::x64:*
	cpe:2.3:o:microsoft:windows_xp:-:sp2::::::
	cpe:2.3:o:microsoft:windows_xp:-:sp2:professional::::x64:
	cpe:2.3:o:microsoft:windows_xp:-:sp3::::::

History

21 Nov 2024, 00:59

Type	Values Removed	Values Added
References	~~() http://osvdb.org/51839 - Broken Link~~	() http://osvdb.org/51839 - Broken Link
References	~~() http://www.securityfocus.com/bid/33627 - Third Party Advisory, VDB Entry~~	() http://www.securityfocus.com/bid/33627 - Third Party Advisory, VDB Entry
References	~~() http://www.us-cert.gov/cas/techalerts/TA09-041A.html - Third Party Advisory, US Government Resource~~	() http://www.us-cert.gov/cas/techalerts/TA09-041A.html - Third Party Advisory, US Government Resource
References	~~() http://www.vupen.com/english/advisories/2009/0389 - Vendor Advisory~~	() http://www.vupen.com/english/advisories/2009/0389 - Vendor Advisory
References	~~() http://www.zerodayinitiative.com/advisories/ZDI-09-011/ - Third Party Advisory, VDB Entry~~	() http://www.zerodayinitiative.com/advisories/ZDI-09-011/ - Third Party Advisory, VDB Entry
References	~~() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-002 - Patch, Vendor Advisory~~	() https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-002 - Patch, Vendor Advisory
References	~~() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6000 - Third Party Advisory~~	() https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6000 - Third Party Advisory
References	~~() https://www.exploit-db.com/exploits/8077 - Third Party Advisory, VDB Entry~~	() https://www.exploit-db.com/exploits/8077 - Third Party Advisory, VDB Entry
References	~~() https://www.exploit-db.com/exploits/8079 - Third Party Advisory, VDB Entry~~	() https://www.exploit-db.com/exploits/8079 - Third Party Advisory, VDB Entry
References	~~() https://www.exploit-db.com/exploits/8080 - Third Party Advisory, VDB Entry~~	() https://www.exploit-db.com/exploits/8080 - Third Party Advisory, VDB Entry
References	~~() https://www.exploit-db.com/exploits/8082 - Third Party Advisory, VDB Entry~~	() https://www.exploit-db.com/exploits/8082 - Third Party Advisory, VDB Entry

Information

Published : 2009-02-10 22:30

Updated : 2024-11-21 00:59

NVD link : CVE-2009-0075

Mitre link : CVE-2009-0075

CVE.ORG link : CVE-2009-0075

JSON object : View

Products Affected

microsoft

windows_vista
windows_xp
windows_server_2003
windows_server_2008
internet_explorer

CWE

CWE-399

Resource Management Errors

9.3 /10