NVD

Id
3349  
Name
CVE-2008-3475  
Description
Microsoft Internet Explorer 6 does not properly handle errors related to using the componentFromPoint method on xml objects that have been (1) incorrectly initialized or (2) deleted, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "Uninitialized Memory Corruption Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-10-14  
Modified Date
2012-01-26  
Seq
2008-3475  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
21084 3349 CVE-2008-3475 http://ifsec.blogspot.com/2008/10/internet-explorer-6-componentfrompoint.html  View
21085 3349 CVE-2008-3475 HPSBST02379  View
21086 3349 CVE-2008-3475 oval:org.mitre.oval:def:13151  View
21087 3349 CVE-2008-3475 MS08-058  View
21088 3349 CVE-2008-3475 20081015 Internet Explorer 6 componentFromPoint() remote memory disclosure and remote code execution  View
21089 3349 CVE-2008-3475 31617  View
21090 3349 CVE-2008-3475 1021047  View
21091 3349 CVE-2008-3475 TA08-288A  View
21092 3349 CVE-2008-3475 ADV-2008-2809  View
21093 3349 CVE-2008-3475 http://www.zerodayinitiative.com/advisories/ZDI-08-069/  View
21094 3349 CVE-2008-3475 ie-uninitialized-objects-code-execution(45563)  View
21095 3349 CVE-2008-3475 win-ms08kb956390-update(45565)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46550 JVNDB-2008-001860 Microsoft Internet Explorer におけるエラー処理に関する任意のコードを実行される脆弱性 Microsoft Internet Explorer には、不正に初期化、または消去されたオブジェクトへのアクセスに関連したエラーの処理に不備があるため、任意のコードを実行される脆弱性が存在します。 CVE-2008-3475 33588 CVE-2008-3475 3349 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001860.html 2008-10-14 2008-11-17 View