Unscored CVE-2008-3476 EUVD-2008-3462GHSA-rwvx-jmhc-59j8

Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle errors associated with access to uninitialized memory, which allows rem…

Published Oct 15, 2008 · Updated Aug 7, 2024 · Assigned by microsoft

Description

Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle errors associated with access to uninitialized memory, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "HTML Objects Memory Corruption Vulnerability."

References

oval:org.mitre.oval:def:13344 vdb-entry signature
SSRT080143 vendor-advisory
MS08-058 vendor-advisory
ADV-2008-2809 vdb-entry
ie-unit-memory-code-execution(45564) vdb-entry
1021047 vdb-entry
31618 vdb-entry
TA08-288A third-party-advisory
win-ms08kb956390-update(45565) vdb-entry