CVE-2008-1442

CRITICAL 9.3CVE-2008-1442 · Published 12/06/2008 · updated 16/06/2026

Package	Affected versions	Patched versions
internet explorer microsoft	`= 6= 7`	No fix yet

Description

Heap-based buffer overflow in the substringData method in Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code, related to an unspecified manipulation of a DOM object before a call to this method, aka the "HTML Objects Memory Corruption Vulnerability."

References

marc.info · Mailing List
secunia.com/advisories/30575 · Patch
securityreason.com/securityalert/3934 · Third Party Advisory
securitytracker.com/id · Patch
securityfocus.com/archive/1/493253/100/0/threaded
securityfocus.com/bid/29556 · Third Party Advisory
us-cert.gov/cas/techalerts/TA08-162B.html · Third Party Advisory
vupen.com/english/advisories/2008/1778 · Broken Link
zerodayinitiative.com/advisories/ZDI-08-039 · Patch
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-031
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5720

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free