Vulnerability in N/a

CVE-2008-1442

Heap-based buffer overflow in the substringData method in Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code, related to an unspecified manipulation of a DOM object before a call to this method, aka the "…

EPSS: 0.629 (98.4th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

MS08-031 (x_refsource_MS, vendor-advisory)
www.zerodayinitiative.com/advisories/ZDI-08-039/ (x_refsource_MISC)
ADV-2008-1778 (vdb-entry, x_refsource_VUPEN)
3934 (x_refsource_SREASON, third-party-advisory)
1020225 (vdb-entry, x_refsource_SECTRACK)
TA08-162B (x_refsource_CERT, third-party-advisory)
oval:org.mitre.oval:def:5720 (x_refsource_OVAL, signature, vdb-entry)
HPSBST02344 (x_refsource_HP, vendor-advisory)
29556 (vdb-entry, x_refsource_BID)
20080610 ZDI-08-039: Microsoft Internet Explorer DOM Ojbect substringData() Heap Overflow Vulnerability (mailing-list, x_refsource_BUGTRAQ)