vendor:
Internet Explorer
by:
TippingPoint
9,3
CVSS
HIGH
Memory Corruption
119
CWE
Product Name: Internet Explorer
Affected Version From: Internet Explorer 6.0
Affected Version To: Internet Explorer 8.0
Patch Exists: YES
Related CWE: CVE-2009-2529
CPE: a:microsoft:internet_explorer
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows
2009
Microsoft Internet Explorer Object Tag Memory Corruption Vulnerability
This vulnerability exists in Microsoft Internet Explorer due to a memory corruption issue when processing an object tag. An attacker can exploit this vulnerability by convincing a user to open a malicious web page containing a specially crafted object tag. Successful exploitation could result in arbitrary code execution in the context of the current user.
Mitigation:
Microsoft has released a security update to address this vulnerability. Users should apply the update as soon as possible.