NVD

Id
48801  
Name
CVE-2009-1528  
Description
Microsoft Internet Explorer 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly synchronize AJAX requests, which allows allows remote attackers to execute arbitrary code via a large number of concurrent, asynchronous XMLHttpRequest calls, aka "HTML Object Memory Corruption Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-06-10  
Modified Date
2010-08-21  
Seq
2009-1528  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
246494 48801 CVE-2009-1528 oval:org.mitre.oval:def:6260  View
246495 48801 CVE-2009-1528 MS09-019  View
246496 48801 CVE-2009-1528 20090610 ZDI-09-037: Microsoft Internet Explorer Concurrent Ajax Request Memory Corruption Vulnerability  View
246497 48801 CVE-2009-1528 35222  View
246498 48801 CVE-2009-1528 1022350  View
246499 48801 CVE-2009-1528 TA09-160A  View
246500 48801 CVE-2009-1528 ADV-2009-1538  View
246501 48801 CVE-2009-1528 http://www.zerodayinitiative.com/advisories/ZDI-09-037  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40776 JVNDB-2009-001782 Microsoft Internet Explorer における AJAX リクエストの処理に関連した任意のコードを実行される脆弱性 Microsoft Internet Explorer には、AJAX リクエストを正しく同期しないため、任意のコードを実行される脆弱性が存在します。 CVE-2009-1528 38959 CVE-2009-1528 48801 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001782.html 2009-06-09 2009-07-21 View