CVE

Id
31202  
CVE No.
CVE-2008-1085  
Status
Candidate  
Description
Use-after-free vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 through SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream that triggers memory corruption, as demonstrated using an invalid MIME-type that does not have a registered handler.  
Phase
Assigned (20080228)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
332680 31202 CVE-2008-1085 BUGTRAQ:20080414 Secunia Research: Internet Explorer Data Stream HandlingVulnerability  View
332681 31202 CVE-2008-1085 URL:http://www.securityfocus.com/archive/1/archive/1/490840/100/0/threaded  View
332682 31202 CVE-2008-1085 MISC:http://secunia.com/secunia_research/2007-100/advisory/  View
332683 31202 CVE-2008-1085 HP:HPSBST02329  View
332684 31202 CVE-2008-1085 URL:http://marc.info/?l=bugtraq&m=120845064910729&w=2  View
332685 31202 CVE-2008-1085 HP:SSRT080048  View
332686 31202 CVE-2008-1085 URL:http://marc.info/?l=bugtraq&m=120845064910729&w=2  View
332687 31202 CVE-2008-1085 MS:MS08-024  View
332688 31202 CVE-2008-1085 URL:http://www.microsoft.com/technet/security/bulletin/ms08-024.mspx  View
332689 31202 CVE-2008-1085 CERT:TA08-099A  View
332690 31202 CVE-2008-1085 URL:http://www.us-cert.gov/cas/techalerts/TA08-099A.html  View
332691 31202 CVE-2008-1085 BID:28552  View
332692 31202 CVE-2008-1085 URL:http://www.securityfocus.com/bid/28552  View
332693 31202 CVE-2008-1085 OVAL:oval:org.mitre.oval:def:5563  View
332694 31202 CVE-2008-1085 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:5563  View
332695 31202 CVE-2008-1085 VUPEN:ADV-2008-1148  View
332696 31202 CVE-2008-1085 URL:http://www.vupen.com/english/advisories/2008/1148/references  View
332697 31202 CVE-2008-1085 SECTRACK:1019801  View
332698 31202 CVE-2008-1085 URL:http://www.securitytracker.com/id?1019801  View
332699 31202 CVE-2008-1085 SECUNIA:27707  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45956 JVNDB-2008-001266 Microsoft Visio におけるオブジェクトヘッダ処理の不備による任意のコードを実行される脆弱性 Microsoft Visio には、Visio ファイルのオブジェクトヘッダデータの処理に不備があり、任意のコードを実行される脆弱性が存在します。 CVE-2008-1089 31202 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001266.html  View