CVE-2008-1085

Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 through SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream that triggers memory corruption, as demonstrated using an invalid MIME-type that does not have a registered handler.

Link	Resource
http://secunia.com/secunia_research/2007-100/advisory/	Vendor Advisory
http://www.securityfocus.com/bid/28552
http://www.securitytracker.com/id?1019801
http://secunia.com/advisories/27707	Patch Vendor Advisory
http://www.us-cert.gov/cas/techalerts/TA08-099A.html	US Government Resource
http://marc.info/?l=bugtraq&m=120845064910729&w=2
http://www.vupen.com/english/advisories/2008/1148/references
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5563
http://www.securityfocus.com/archive/1/490840/100/0/threaded
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-024

Configuration 1

cpe:2.3:a:microsoft:ie:7:windows_xp_sp2:*:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:7:*:windows_xp_professional_x64_edition_sp2:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:6:*:windows_server_2003_x64_edition_sp2:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:6:*:windows_server_2003_x64_edition:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:6:*:windows_xp_professional_x64_edition:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2008_itanium_edition:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2008_x32_edition:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:7:*:windows_xp_professional_x64_edition:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2003_sp2_itanium:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2003_x64_edition:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:6:*:windows_server_2003_sp2:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2003_sp2:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:7:*:windows_vista:*:*:*:*:* cpe:2.3:a:microsoft:ie:7:*:windows_server_2003:*:*:*:*:* cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1:*:*:*:*:*:* cpe:2.3:a:microsoft:ie:6:windows_server_2003_sp1_itanium:*:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:6:*:windows_xp_professional_x64_edition_sp2:*:*:*:*:* cpe:2.3:a:microsoft:ie:7:windows_server_2003_sp1:*:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:7:*:windows_vista_x64:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2008_x64_edition:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:7:*:windows_server_2003_x64_edition_sp2:*:*:*:*:* cpe:2.3:a:microsoft:ie:5.01:windows_2000_sp4:*:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:6:*:windows_server_2003_sp2_itanium:*:*:*:*:* cpe:2.3:a:microsoft:ie:6:windows_xp_sp2:*:*:*:*:*:*

---

Published : 2008-04-08 11:05

Updated : 2018-10-12 09:45

---

NVD link : CVE-2008-1085

Mitre link : CVE-2008-1085

No products.

CWE-94