CVE

Id
34961  
CVE No.
CVE-2008-4844  
Status
Candidate  
Description
Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving (1) an XML Island, (2) XML DSOs, or (3) Tabular Data Control (TDC) in a crafted HTML or XML document, as demonstrated by nested SPAN or MARQUEE elements, and exploited in the wild in December 2008.  
Phase
Assigned (20081031)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
382796 34961 CVE-2008-4844 MILW0RM:7403  View
382797 34961 CVE-2008-4844 URL:http://www.milw0rm.com/exploits/7403  View
382798 34961 CVE-2008-4844 MILW0RM:7410  View
382799 34961 CVE-2008-4844 URL:http://www.milw0rm.com/exploits/7410  View
382800 34961 CVE-2008-4844 MILW0RM:7477  View
382801 34961 CVE-2008-4844 URL:http://www.milw0rm.com/exploits/7477  View
382802 34961 CVE-2008-4844 MILW0RM:7583  View
382803 34961 CVE-2008-4844 URL:http://www.milw0rm.com/exploits/7583  View
382804 34961 CVE-2008-4844 MISC:http://blogs.msdn.com/sdl/archive/2008/12/18/ms08-078-and-the-sdl.aspx  View
382805 34961 CVE-2008-4844 MISC:http://code.google.com/p/inception-h2hc/  View
382806 34961 CVE-2008-4844 MISC:http://isc.sans.org/diary.html?storyid=5458  View
382807 34961 CVE-2008-4844 MISC:http://www.avertlabs.com/research/blog/index.php/2008/12/09/yet-another-unpatched-drive-by-exploit-found-on-the-web/  View
382808 34961 CVE-2008-4844 MISC:http://www.breakingpointsystems.com/community/blog/patch-tuesdays-and-drive-by-sundays  View
382809 34961 CVE-2008-4844 MISC:http://www.scanw.com/blog/archives/303  View
382810 34961 CVE-2008-4844 CONFIRM:http://www.microsoft.com/technet/security/advisory/961051.mspx  View
382811 34961 CVE-2008-4844 HP:HPSBST02397  View
382812 34961 CVE-2008-4844 URL:http://marc.info/?l=bugtraq&m=123015308222620&w=2  View
382813 34961 CVE-2008-4844 HP:SSRT080187  View
382814 34961 CVE-2008-4844 URL:http://marc.info/?l=bugtraq&m=123015308222620&w=2  View
382815 34961 CVE-2008-4844 MS:MS08-078  View
382816 34961 CVE-2008-4844 URL:http://www.microsoft.com/technet/security/bulletin/ms08-078.mspx  View
382817 34961 CVE-2008-4844 CERT:TA08-344A  View
382818 34961 CVE-2008-4844 URL:http://www.us-cert.gov/cas/techalerts/TA08-344A.html  View
382819 34961 CVE-2008-4844 CERT:TA08-352A  View
382820 34961 CVE-2008-4844 URL:http://www.us-cert.gov/cas/techalerts/TA08-352A.html  View
382821 34961 CVE-2008-4844 CERT-VN:VU#493881  View
382822 34961 CVE-2008-4844 URL:http://www.kb.cert.org/vuls/id/493881  View
382823 34961 CVE-2008-4844 BID:32721  View
382824 34961 CVE-2008-4844 URL:http://www.securityfocus.com/bid/32721  View
382825 34961 CVE-2008-4844 OVAL:oval:org.mitre.oval:def:6007  View
382826 34961 CVE-2008-4844 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6007  View
382827 34961 CVE-2008-4844 VUPEN:ADV-2008-3391  View
382828 34961 CVE-2008-4844 URL:http://www.vupen.com/english/advisories/2008/3391  View
382829 34961 CVE-2008-4844 SECTRACK:1021381  View
382830 34961 CVE-2008-4844 URL:http://www.securitytracker.com/id?1021381  View
382831 34961 CVE-2008-4844 SECUNIA:33089  View

Related JVN