CVE-2008-0077
high · 8.8Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote attackers to execute arbitrary code by assigning malformed values to certain properties, as demonstrated using the by property of an animateMotion SVG element, aka "Property Memory Corruption Vulnerability."
8.8
CVSS
37.2%
EPSS (exploit prob.)
98th
EPSS percentile
2008-02-12
Published
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weaknesses
CWE-416
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | internet_explorer | 6 |
| microsoft | windows_2000 | all versions |
| microsoft | internet_explorer | 6 |
| microsoft | windows_2003_server | all versions |
| microsoft | windows_2003_server | all versions |
| microsoft | windows_2003_server | all versions |
| microsoft | windows_2003_server | all versions |
| microsoft | windows_server_2003 | all versions |
| microsoft | windows_server_2003 | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | internet_explorer | 7 |
| microsoft | windows_2003_server | all versions |
| microsoft | windows_2003_server | all versions |
| microsoft | windows_2003_server | all versions |
| microsoft | windows_2003_server | all versions |
| microsoft | windows_vista | all versions |
| microsoft | windows_vista | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
| microsoft | windows_xp | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=661
- http://marc.info/?l=bugtraq&m=120361015026386&w=2
- http://secunia.com/advisories/28903
- http://www.kb.cert.org/vuls/id/228569
- http://www.securityfocus.com/archive/1/488048/100/0/threaded
- http://www.securityfocus.com/bid/27666
- http://www.securitytracker.com/id?1019380
- http://www.us-cert.gov/cas/techalerts/TA08-043C.html
- http://www.vupen.com/english/advisories/2008/0512/references
- http://www.zerodayinitiative.com/advisories/ZDI-08-006.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-010
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5396
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=661
- http://marc.info/?l=bugtraq&m=120361015026386&w=2
- http://secunia.com/advisories/28903
- http://www.kb.cert.org/vuls/id/228569
- http://www.securityfocus.com/archive/1/488048/100/0/threaded
- http://www.securityfocus.com/bid/27666
- http://www.securitytracker.com/id?1019380
- http://www.us-cert.gov/cas/techalerts/TA08-043C.html
- http://www.vupen.com/english/advisories/2008/0512/references
- http://www.zerodayinitiative.com/advisories/ZDI-08-006.html
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-010
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5396
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2008-0077