Vulnerability in Microsoft Internet Explorer
CVE-2008-4844
Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving (1) an XML Island, (2) XML DSOs, or (3) Tabular Data Control (TDC) in a crafted HTML or XML document, as demonstrated by nested SPAN or MARQUEE elements, and exploited in the wild in December 2008.
EPSS: 0.665 (99.2th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Internet_explorer — versions 5.01, 6, 7
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- secure@microsoft.com (x_refsource_MISC)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
- secure@microsoft.com (Exploit, x_refsource_MISC)
- secure@microsoft.com (exploit, x_refsource_EXPLOIT-DB)
- secure@microsoft.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- secure@microsoft.com (x_refsource_MISC)
- secure@microsoft.com (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
- secure@microsoft.com (signature, x_refsource_OVAL, vdb-entry)
- secure@microsoft.com (vdb-entry, x_refsource_BID)
- secure@microsoft.com (exploit, x_refsource_EXPLOIT-DB)
Frequently asked questions
- What is CVE-2008-4844?
- CVE-2008-4844 is a vulnerability in Microsoft Internet Explorer, classified under CWE-399. Published 2008-12-11.
- Is CVE-2008-4844 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.