Unscored CVE-2008-4258 EUVD-2008-4241GHSA-5pcw-47jc-ccp5

Microsoft Internet Explorer 5.01 SP4 and 6 SP1 does not properly validate parameters during calls to navigation methods, which allows remot…

Published Dec 10, 2008 · Updated Aug 7, 2024 · Assigned by microsoft

Description

Microsoft Internet Explorer 5.01 SP4 and 6 SP1 does not properly validate parameters during calls to navigation methods, which allows remote attackers to execute arbitrary code via a crafted HTML document that triggers memory corruption, aka "Parameter Validation Memory Corruption Vulnerability."

References

ADV-2008-3385 vdb-entry
1021371 vdb-entry
oval:org.mitre.oval:def:5231 vdb-entry signature
TA08-344A third-party-advisory
MS08-073 vendor-advisory