critical9.3Public exploit code
CVE-2009-0075
Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary co…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer 7 - CFunctionPointer Uninitialized Memory Corruption (MS09-002) (Metasploit)2010-07-12 · remote · windows · Verified
- Microsoft Internet Explorer 7 - Memory Corruption (MS09-002)2009-03-04 · remote · windows · Verified
- Microsoft Internet Explorer 7 (Windows 2003 SP2) - Memory Corruption (MS09-002)2009-02-20 · remote · windows · Verified
- Microsoft Internet Explorer 7 - Memory Corruption (MS09-002)2009-02-20 · remote · windows · Verified
- Microsoft Internet Explorer 7 (Windows XP SP2) - Memory Corruption (MS09-002)2009-02-20 · remote · windows · Verified
- Microsoft Internet Explorer 7 - Memory Corruption (PoC) (MS09-002)2009-02-18 · dos · windows · Verified
Impact
Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka "Uninitialized Memory Corruption Vulnerability."
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | Version 7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://osvdb.org/51839
- http://www.securityfocus.com/bid/33627
- http://www.us-cert.gov/cas/techalerts/TA09-041A.html
- http://www.vupen.com/english/advisories/2009/0389
- http://www.zerodayinitiative.com/advisories/ZDI-09-011/
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-002
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6000
- https://www.exploit-db.com/exploits/8077
- https://www.exploit-db.com/exploits/8079
- https://www.exploit-db.com/exploits/8080
- https://www.exploit-db.com/exploits/8082
- http://osvdb.org/51839
- http://www.securityfocus.com/bid/33627
- http://www.us-cert.gov/cas/techalerts/TA09-041A.html
- http://www.vupen.com/english/advisories/2009/0389
- http://www.zerodayinitiative.com/advisories/ZDI-09-011/
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-002
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6000
- https://www.exploit-db.com/exploits/8077
- https://www.exploit-db.com/exploits/8079
- https://www.exploit-db.com/exploits/8080
- https://www.exploit-db.com/exploits/8082