Description
Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka "Uninitialized Memory Corruption Vulnerability."
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
MS09-002 Microsoft Internet Explorer 7 CFunctionPointer Uninitialized Memory Corruption
exploit/windows/browser/ms09_002_memory_corruption
Exploit-DB 6
- Microsoft Internet Explorer 7 - CFunctionPointer Uninitialized Memory Corruption (MS09-002) (Metasploit) EDB-16555 · remote · Jul 12, 2010 · verified
- Microsoft Internet Explorer 7 - Memory Corruption (MS09-002) EDB-8152 · remote · Mar 4, 2009 · verified
- Microsoft Internet Explorer 7 (Windows XP SP2) - Memory Corruption (MS09-002) EDB-8079 · remote · Feb 20, 2009 · verified
- Microsoft Internet Explorer 7 - Memory Corruption (MS09-002) EDB-8080 · remote · Feb 20, 2009 · verified
- Microsoft Internet Explorer 7 (Windows 2003 SP2) - Memory Corruption (MS09-002) EDB-8082 · remote · Feb 20, 2009 · verified
- Microsoft Internet Explorer 7 - Memory Corruption (PoC) (MS09-002) EDB-8077 · dos · Feb 18, 2009 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- oval:org.mitre.oval:def:6000 vdb-entry signature
- 8082 exploit
- http://www.zerodayinitiative.com/advisories/ZDI-09-011/
- 33627 vdb-entry
- ADV-2009-0389 vdb-entry
- 51839 vdb-entry
- 8079 exploit
- 8080 exploit
- 8077 exploit
- TA09-041A third-party-advisory
- MS09-002 vendor-advisory