CVE-2009-3671

Published Dec 9, 2009 CVSS 3.1 · 8.1 High EPSS 21.0% KEV · Not listed
Description
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3674.

Analysis

No analysis available yet

Remediation

No remediation available yet

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
First Time appeared Microsoft ie
Weaknesses CWE-416
CPEs cpe:2.3:a:microsoft:ie:8:*:*:*:*:*:*:*
Vendors & Products Microsoft ie
Metrics cvssV3_1

{'score': 8.1, 'vector': 'CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H'}

ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Weaknesses

Sources

Status
PUBLISHED
Assigner
microsoft
Published
Updated
Oct 21, 2024, 4:41 PM
Reserved
Oct 13, 2009, 12:00 AM
Status
Modified
Published
Dec 9, 2009, 6:30 PM
Modified
Jun 16, 2026, 11:12 PM