Microsoft Internet Explorer 6 does not properly handle errors related to using the componentFromPoint method on xml objects that have been (1) incorrectly initialized or (2) deleted, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "Uninitialized Memory Corruption Vulnerability."
References
Configurations
Configuration 1 (hide)
| AND |
|
Configuration 2 (hide)
| AND |
|
Configuration 3 (hide)
| AND |
|
History
21 Nov 2024, 00:49
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://ifsec.blogspot.com/2008/10/internet-explorer-6-componentfrompoint.html - Issue Tracking, Third Party Advisory | |
| References | () http://marc.info/?l=bugtraq&m=122479227205998&w=2 - Mailing List | |
| References | () http://www.securityfocus.com/archive/1/497380/100/0/threaded - Broken Link, Third Party Advisory, VDB Entry | |
| References | () http://www.securityfocus.com/bid/31617 - Broken Link, Patch, Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/id?1021047 - Broken Link, Third Party Advisory, VDB Entry | |
| References | () http://www.us-cert.gov/cas/techalerts/TA08-288A.html - Broken Link, Third Party Advisory, US Government Resource | |
| References | () http://www.vupen.com/english/advisories/2008/2809 - Broken Link | |
| References | () http://www.zerodayinitiative.com/advisories/ZDI-08-069/ - Third Party Advisory, VDB Entry | |
| References | () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058 - Patch, Vendor Advisory | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/45563 - Third Party Advisory, VDB Entry | |
| References | () https://exchange.xforce.ibmcloud.com/vulnerabilities/45565 - Third Party Advisory, VDB Entry | |
| References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13151 - Broken Link |
08 Feb 2024, 23:46
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-908 | |
| CPE | cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_vista:*:gold:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2003:*:sp1:x64:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:gold:professional_x64:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:*:sp2:professional_x64:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:* cpe:2.3:o:microsoft:windows_vista:*:gold:x64:*:*:*:*:* cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:* |
cpe:2.3:o:microsoft:windows_vista:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2003:-:*:*:*:*:*:x64:* cpe:2.3:a:microsoft:internet_explorer:6:-:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_2000:-:sp4:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:x64:* cpe:2.3:o:microsoft:windows_xp:-:sp3:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:-:*:*:*:professional:*:x64:* cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:professional:*:x64:* cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:-:*:itanium:* cpe:2.3:a:microsoft:internet_explorer:7.0:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2003:-:sp1:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2008:-:*:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_xp:-:sp2:*:*:*:*:*:* cpe:2.3:o:microsoft:windows_server_2003:-:sp2:*:*:*:*:itanium:* cpe:2.3:o:microsoft:windows_vista:-:sp1:*:*:*:*:*:* |
| CVSS |
v2 : v3 : |
v2 : 9.3
v3 : 8.8 |
| References | (MISC) http://www.zerodayinitiative.com/advisories/ZDI-08-069/ - Third Party Advisory, VDB Entry | |
| References | (CERT) http://www.us-cert.gov/cas/techalerts/TA08-288A.html - Broken Link, Third Party Advisory, US Government Resource | |
| References | (BUGTRAQ) http://www.securityfocus.com/archive/1/497380/100/0/threaded - Broken Link, Third Party Advisory, VDB Entry | |
| References | (MS) https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058 - Patch, Vendor Advisory | |
| References | (HP) http://marc.info/?l=bugtraq&m=122479227205998&w=2 - Mailing List | |
| References | (MISC) http://ifsec.blogspot.com/2008/10/internet-explorer-6-componentfrompoint.html - Issue Tracking, Third Party Advisory | |
| References | (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/45563 - Third Party Advisory, VDB Entry | |
| References | (OVAL) https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13151 - Broken Link | |
| References | (SECTRACK) http://www.securitytracker.com/id?1021047 - Broken Link, Third Party Advisory, VDB Entry | |
| References | (XF) https://exchange.xforce.ibmcloud.com/vulnerabilities/45565 - Third Party Advisory, VDB Entry | |
| References | (VUPEN) http://www.vupen.com/english/advisories/2008/2809 - Broken Link | |
| References | (BID) http://www.securityfocus.com/bid/31617 - Broken Link, Patch, Third Party Advisory, VDB Entry |
07 Dec 2023, 18:38
| Type | Values Removed | Values Added |
|---|---|---|
| CPE |
Information
Published : 2008-10-15 00:12
Updated : 2025-04-09 00:30
NVD link : CVE-2008-3475
Mitre link : CVE-2008-3475
CVE.ORG link : CVE-2008-3475
JSON object : View
Products Affected
microsoft
- windows_server_2003
- internet_explorer
- windows_2000
- windows_xp
- windows_server_2008
- windows_vista
CWE
CWE-908
Use of Uninitialized Resource