CVE-2009-0552

Currently unrated

Key Information:

Vendor
Microsoft
Status
Ie
Internet Explorer
Vendor
CVE Published:
15 April 2009

Summary

Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 on Windows XP SP2 and SP3, and 6 on Windows Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka "Uninitialized Memory Corruption Vulnerability."

References

http://www.vupen.com/english/advisories/2009/1028
vdb-entryx_refsource_VUPEN
http://osvdb.org/53625
vdb-entryx_refsource_OSVDB
http://www.us-cert.gov/cas/techalerts/TA09-104A.html
third-party-advisoryx_refsource_CERT

EPSS Score

85% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.