CVE-2009-1043

CRITICAL 10.0CVE-2009-1043 · Published 23/03/2009 · updated 16/06/2026

Package	Affected versions	Patched versions
internet explorer microsoft	`= 8`	No fix yet

Description

Unspecified vulnerability in Microsoft Internet Explorer 8 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors triggered by clicking on a link, as demonstrated by Nils during a PWN2OWN competition at CanSecWest 2009.

References

blogs.zdnet.com/security
cansecwest.com/index.html
dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009
dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits
dvlabs.tippingpoint.com/blog/2009/03/20/pwn2own-day-2
news.cnet.com/8301-1009_3-10199652-83.html
osvdb.org/52892
h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889
securityfocus.com/bid/34182
securitytracker.com/id
exchange.xforce.ibmcloud.com/vulnerabilities/49389

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free