CVE-2008-1085
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
15Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 32%
Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 through SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream that triggers memory corruption, as demonstrated using an invalid MIME-type that does not have a registered handler.
Produtos afetados
n/a · n/aReferências
http://marc.info/?l=bugtraq&m=120845064910729&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-024http://secunia.com/advisories/27707http://secunia.com/secunia_research/2007-100/advisory/https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5563http://www.securityfocus.com/archive/1/490840/100/0/threadedhttp://www.securityfocus.com/bid/28552http://www.securitytracker.com/id?1019801http://www.us-cert.gov/cas/techalerts/TA08-099A.htmlhttp://www.vupen.com/english/advisories/2008/1148/references