PT-2009-4025 · Microsoft · Internet Explorer+4

Published 2009-06-10 · Updated 2023-12-07 · CVE-2009-1528

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 and 7 for Windows XP SP2 and SP3 Microsoft Internet Explorer versions 6 and 7 for Server 2003 SP2 Microsoft Internet Explorer version 7 for Vista Gold, SP1, and SP2 Microsoft Internet Explorer version 7 for Server 2008 SP2

Description: The issue arises from the improper synchronization of AJAX requests, allowing remote attackers to execute arbitrary code via a large number of concurrent, asynchronous XMLHttpRequest calls. This is related to the way Internet Explorer accesses an object that has not been correctly initialized or has been deleted. An attacker could exploit this by constructing a specially crafted Web page, potentially leading to remote code execution. If successfully exploited, an attacker could gain the same user rights as the logged-on user, and if the user has administrative rights, the attacker could take complete control of the affected system.

Recommendations: For Microsoft Internet Explorer versions 6 and 7 for Windows XP SP2 and SP3, update to a newer version to mitigate the risk. For Microsoft Internet Explorer versions 6 and 7 for Server 2003 SP2, update to a newer version to mitigate the risk. For Microsoft Internet Explorer version 7 for Vista Gold, SP1, and SP2, update to a newer version to mitigate the risk. For Microsoft Internet Explorer version 7 for Server 2008 SP2, update to a newer version to mitigate the risk.

Fix

RCE

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2009-1528

Affected Products

Internet Explorer

Server 2003

Server 2008

Vista

Windows Xp

References · 12

• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1528 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2009-1528 · Security Note
• http://vupen.com/english/advisories/2009/1538 · Vendor Advisory
• https://docs.microsoft.com/security-updates/securitybulletins/2009/MS09-019 · Note
• http://securityfocus.com/archive/1/504206/100/0/threaded · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6260 · Note
• http://securitytracker.com/id?1022350 · Note
• http://us-cert.gov/cas/techalerts/TA09-160A.html · Note
• http://zerodayinitiative.com/advisories/ZDI-09-037 · Note
• http://osvdb.org/54947 · Note
• http://securityfocus.com/bid/35222 · Note