CVE-2008-3475 | BDVDB-2026-32893 Detail
Description#
Microsoft Internet Explorer 6 does not properly handle errors related to using the componentFromPoint method on xml objects that have been (1) incorrectly initialized or (2) deleted, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "Uninitialized Memory Corruption Vulnerability."
Impact#
No impact statement in the source data.
Weaknesses#
No weakness recorded in the source data.
References#
- http://ifsec.blogspot.com/2008/10/internet-explorer-6-componentfrompoint.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13151
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45563
- http://www.securityfocus.com/archive/1/497380/100/0/threaded
- http://marc.info/?l=bugtraq&m=122479227205998&w=2
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058
- http://www.vupen.com/english/advisories/2008/2809
- http://www.securitytracker.com/id?1021047
- http://www.zerodayinitiative.com/advisories/ZDI-08-069/
- http://www.us-cert.gov/cas/techalerts/TA08-288A.html
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45565
- http://www.securityfocus.com/bid/31617
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.