CVE-2009-0075

EPSS 85.3%

Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka "Uninitialized Memory Corruption Vulnerability."

Affected products

n/a · n/a

public PoCs found — 6

cve_referencewww.exploit-db.com/exploits/8077unverified cve_referencewww.exploit-db.com/exploits/8082unverified cve_referencewww.exploit-db.com/exploits/8079unverified exploitdbwww.exploit-db.com/exploits/16555unverified cve_referencewww.exploit-db.com/exploits/8080unverified exploitdbwww.exploit-db.com/exploits/8152unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/51839 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-002 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6000 https://www.exploit-db.com/exploits/8077 https://www.exploit-db.com/exploits/8079 https://www.exploit-db.com/exploits/8080 https://www.exploit-db.com/exploits/8082 http://www.securityfocus.com/bid/33627 http://www.us-cert.gov/cas/techalerts/TA09-041A.html http://www.vupen.com/english/advisories/2009/0389 http://www.zerodayinitiative.com/advisories/ZDI-09-011/