CVE

Id
39954  
CVE No.
CVE-2009-2519  
Status
Candidate  
Description
The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTML markup, which allows remote attackers to execute arbitrary code via a crafted web site that triggers "system state" corruption, aka "DHTML Editing Component ActiveX Control Vulnerability."  
Phase
Assigned (20090717)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
439060 39954 CVE-2009-2519 MS:MS09-046  View
439061 39954 CVE-2009-2519 URL:http://www.microsoft.com/technet/security/Bulletin/MS09-046.mspx  View
439062 39954 CVE-2009-2519 CERT:TA09-251A  View
439063 39954 CVE-2009-2519 URL:http://www.us-cert.gov/cas/techalerts/TA09-251A.html  View
439064 39954 CVE-2009-2519 BID:36280  View
439065 39954 CVE-2009-2519 URL:http://www.securityfocus.com/bid/36280  View
439066 39954 CVE-2009-2519 OVAL:oval:org.mitre.oval:def:6271  View
439067 39954 CVE-2009-2519 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6271  View
439068 39954 CVE-2009-2519 SECTRACK:1022843  View
439069 39954 CVE-2009-2519 URL:http://www.securitytracker.com/id?1022843  View
439070 39954 CVE-2009-2519 SECUNIA:36592  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
41371 JVNDB-2009-002378 Microsoft Windows の License Logging Server (llssrv.exe) における任意のコードを実行される脆弱性 Microsoft Windows の License Logging Server (llssrv.exe) には、null 終端文字をもたない RPC メッセージの処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2009-2523 39954 10 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002378.html  View