CVE-2008-0077

HIGH 8.8CVE-2008-0077 · Published 12/02/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
internet explorer microsoft	`= 6= 7`	No fix yet

Description

Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote attackers to execute arbitrary code by assigning malformed values to certain properties, as demonstrated using the by property of an animateMotion SVG element, aka "Property Memory Corruption Vulnerability."

References

labs.idefense.com/intelligence/vulnerabilities/display.php · Broken Link
marc.info · Mailing List
secunia.com/advisories/28903 · Broken Link
kb.cert.org/vuls/id/228569 · Third Party Advisory
securityfocus.com/archive/1/488048/100/0/threaded · Broken Link
securityfocus.com/bid/27666 · Broken Link
securitytracker.com/id · Broken Link
us-cert.gov/cas/techalerts/TA08-043C.html · Broken Link
vupen.com/english/advisories/2008/0512/references · Broken Link
zerodayinitiative.com/advisories/ZDI-08-006.html · Third Party Advisory
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-010 · Patch
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5396 · Broken Link

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free