Vulnerability in Microsoft Internet Explorer
CVE-2009-1529
Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by calling the setCapture method on a collection of crafted objects, aka "Uninitialized Memory Corruption Vulnerability."
EPSS: 0.287 (97.9th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H.
Affected products
- Microsoft Internet_explorer — versions 6, 7, 5.01
- Microsoft Windows_2000
- Microsoft Windows_server_2003
- Microsoft Windows_server_2008
- Microsoft Windows_vista — versions gold, sp1, sp2
- Microsoft Windows_xp — versions sp3
- N/a — versions n/a
Weakness classification (CWE)
References
- secure@microsoft.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- secure@microsoft.com (mailing-list, x_refsource_BUGTRAQ)
- secure@microsoft.com (x_refsource_MS, vendor-advisory)
- secure@microsoft.com (x_refsource_MISC)
- secure@microsoft.com (vdb-entry, x_refsource_BID)
- secure@microsoft.com (signature, x_refsource_OVAL, vdb-entry)
- secure@microsoft.com (x_refsource_OSVDB, vdb-entry)
- secure@microsoft.com (US Government Resource, x_refsource_CERT, third-party-advisory)
- secure@microsoft.com (vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2009-1529?
- CVE-2009-1529 is a high-severity vulnerability in Microsoft Internet Explorer, classified under CWE-399. CVSS score: 8.1/10. Published 2009-06-10.
- How severe is CVE-2009-1529?
- High severity. CVSS v3 base score is 8.1 out of 10.