Vulnerability in Microsoft Internet Explorer
CVE-2008-4844
Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving (1) an XML Island, (2) XML DSOs, or (3) Tabular Data Control (TDC) in a crafted HTML or XML document, as demonstrated by nested SPAN or MARQUEE elements, and exploited in the wild in December 2008.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 9.3 (High). Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.665 (99.3th percentile), scored .
High probability of exploitation in the next 30 days — patch promptly. 99th percentile — 99.3% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.665 · newest: 0.665 · change: 0.000
Affected products
- Microsoft Internet Explorer — versions 5.01, 6, 7
Weakness classification (CWE)
Public proof-of-concept exploits
References
- www.scanw.com/blog/archives/303
- www.securitytracker.com/id (vdb-entry)
- isc.sans.org/diary.html (Exploit)
- www.exploit-db.com/exploits/7583 (exploit)
- www.us-cert.gov/cas/techalerts/TA08-352A.html (US Government Resource, third-party-advisory)
- code.google.com/p/inception-h2hc/
- www.kb.cert.org/vuls/id/493881 (US Government Resource, third-party-advisory)
- oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:6007 (signature, vdb-entry)
- www.securityfocus.com/bid/32721 (vdb-entry)
- www.exploit-db.com/exploits/7477 (exploit)
Frequently asked questions
- What is CVE-2008-4844?
- CVE-2008-4844 is a vulnerability in Microsoft Internet Explorer, classified under CWE-399. Published 2008-12-11.
- Is CVE-2008-4844 known to be exploited?
- 2 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.