Unscored CVE-2008-1086 EUVD-2008-1097GHSA-2h2x-qrfm-pcx6

The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and…

Published Apr 8, 2008 · Updated Aug 7, 2024 · Assigned by microsoft

Description

The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows remote attackers to execute arbitrary code via malformed arguments, which triggers memory corruption.

References

TA08-099A third-party-advisory
SSRT080048 vendor-advisory
oval:org.mitre.oval:def:5475 vdb-entry signature
29714 third-party-advisory
1019800 vdb-entry
ie-hxvz-code-execution(41464) vdb-entry
20080408 Microsoft HxTocCtrl ActiveX Control Invalid Param Heap Corruption Vulnerability third-party-advisory
ADV-2008-1147 vdb-entry
28606 vdb-entry
MS08-023 vendor-advisory