NVD

Id
1393  
Name
CVE-2008-1442  
Description
Heap-based buffer overflow in the substringData method in Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code, related to an unspecified manipulation of a DOM object before a call to this method, aka the "HTML Objects Memory Corruption Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-06-11  
Modified Date
2016-11-07  
Seq
2008-1442  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
8959 1393 CVE-2008-1442 SSRT080087  View
8960 1393 CVE-2008-1442 oval:org.mitre.oval:def:5720  View
8961 1393 CVE-2008-1442 3934  View
8962 1393 CVE-2008-1442 1020225  View
8963 1393 CVE-2008-1442 MS08-031  View
8964 1393 CVE-2008-1442 20080610 ZDI-08-039: Microsoft Internet Explorer DOM Ojbect substringData() Heap Overflow Vulnerability  View
8965 1393 CVE-2008-1442 29556  View
8966 1393 CVE-2008-1442 TA08-162B  View
8967 1393 CVE-2008-1442 ADV-2008-1778  View
8968 1393 CVE-2008-1442 http://www.zerodayinitiative.com/advisories/ZDI-08-039/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46122 JVNDB-2008-001432 Microsoft Internet Explorer の substringData メソッドにおけるヒープベースのバッファオーバーフローの脆弱性 Microsoft Internet Explorer の substringData メソッドには、任意のコードを実行されるヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2008-1442 31555 CVE-2008-1442 1393 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001432.html 2008-06-11 2008-07-03 View