CVEvulnerability
CVE-2008-0077
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-02-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-416
Description
Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote attackers to execute arbitrary code by assigning malformed values to certain properties, as demonstrated using the by property of an animateMotion SVG element, aka "Property Memory Corruption Vulnerability."
Affected configurations
• microsoft internet explorer 6
• microsoft internet explorer 7
Related
Weakness · CWE (1)
- CWE-416 Use After Free weakness
Referenced by CWE · observed example (1)
- CWE-416 Use After Free weakness
References
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=661 Broken Link
- http://marc.info/?l=bugtraq&m=120361015026386&w=2 Mailing List
- http://secunia.com/advisories/28903 Broken Link, Vendor Advisory
- http://www.kb.cert.org/vuls/id/228569 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/archive/1/488048/100/0/threaded Broken Link, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/27666 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1019380 Broken Link, Third Party Advisory, VDB Entry
- http://www.us-cert.gov/cas/techalerts/TA08-043C.html Broken Link, Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2008/0512/references Broken Link, Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-08-006.html Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-010 Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5396 Broken Link
- http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=661 Broken Link
- http://marc.info/?l=bugtraq&m=120361015026386&w=2 Mailing List
- http://secunia.com/advisories/28903 Broken Link, Vendor Advisory
- http://www.kb.cert.org/vuls/id/228569 Third Party Advisory, US Government Resource
- http://www.securityfocus.com/archive/1/488048/100/0/threaded Broken Link, Third Party Advisory, VDB Entry
- http://www.securityfocus.com/bid/27666 Broken Link, Third Party Advisory, VDB Entry
- http://www.securitytracker.com/id?1019380 Broken Link, Third Party Advisory, VDB Entry
- http://www.us-cert.gov/cas/techalerts/TA08-043C.html Broken Link, Third Party Advisory, US Government Resource
- http://www.vupen.com/english/advisories/2008/0512/references Broken Link, Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-08-006.html Third Party Advisory, VDB Entry
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-010 Patch, Vendor Advisory
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5396 Broken Link