Unscored CVE-2009-2519 EUVD-2009-2514GHSA-f78f-8m3f-69xh

The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTM…

Published Sep 8, 2009 · Updated Aug 7, 2024 · Assigned by microsoft

Description

The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTML markup, which allows remote attackers to execute arbitrary code via a crafted web site that triggers "system state" corruption, aka "DHTML Editing Component ActiveX Control Vulnerability."

References

36280 vdb-entry
MS09-046 vendor-advisory
36592 third-party-advisory
1022843 vdb-entry
TA09-251A third-party-advisory
oval:org.mitre.oval:def:6271 vdb-entry signature