8.1
High
CVE-2009-1529 Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7…
Description
Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by calling the setCapture method on a collection of crafted objects, aka "Uninitialized Memory Corruption Vulnerability."
Affected products and versions
References
- ADV-2009-1538 www.vupen.com
- 20090610 ZDI-09-036: Microsoft Internet Explorer setCapture Memory Corruption Vulnerability www.securityfocus.com
- MS09-019 docs.microsoft.com
- www.zerodayinitiative.com www.zerodayinitiative.com
- 35223 www.securityfocus.com
- oval:org.mitre.oval:def:6295 oval.cisecurity.org
- 54948 osvdb.org
- TA09-160A www.us-cert.gov
- 1022350 www.securitytracker.com
Timeline
- Published
- Last modified
Other CVEs of n/a
The 144658 CVEs of n/a →
CVE-2026-106713
An issue in FreeReels for Android version 2.3.11 allows a remote attacker to obtain sensitive information via the…
Not rated
CVE-2026-106715
NewsBreak for Android version 26.21.0 treats data:text/html; URLs as trusted in its WebView JavaScript bridge origin…
Not rated
CVE-2026-106714
Chewy for Android version 26.23.0 does not adequately validate the host of a product-details deep link before loading it…
Not rated
CVE-2026-106716
ReelShort for Android version 3.8.55 loads an attacker-controlled activityUrl supplied through its cmsvictor://open deep…
Not rated