QwikSec

Security Database

CVE

CWE

Training

CVE Database
/

CVE-2008-2258

Back to search

CVE-2008-2258

Published: Aug 13, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

Microsoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory in certain conditions, which allows remote attackers to cause a denial of service (crash) and execute arbitrary code via vectors related to a document object "appended in a specific order" with "particular functions ... performed on" document objects, aka "HTML Objects Memory Corruption Vulnerability" or "Table Layout Memory Corruption Vulnerability," a different vulnerability than CVE-2008-2257.

VendorProductVersions

n/a

n/a

affected
n/a

References

ADV-2008-2349
vdb-entry
x_refsource_VUPEN
TA08-225A
third-party-advisory
x_refsource_CERT
1020674
vdb-entry
x_refsource_SECTRACK
HPSBST02360
vendor-advisory
x_refsource_HP
oval:org.mitre.oval:def:6025
vdb-entry
signature
x_refsource_OVAL
SSRT080117
vendor-advisory
x_refsource_HP
MS08-045
vendor-advisory
x_refsource_MS
30610
vdb-entry
x_refsource_BID
31375
third-party-advisory
x_refsource_SECUNIA

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now