PT-2009-4029 · Microsoft · Windows Xp+5

Wushi · Published 2009-06-10 · Updated 2025-01-21 · CVE-2009-1532

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer 8 for Windows XP SP2 and SP3 Microsoft Internet Explorer 8 for Server 2003 SP2 Microsoft Internet Explorer 8 for Vista Gold, SP1, and SP2 Microsoft Internet Explorer 8 for Server 2008 SP2

Description: A remote code execution issue exists due to improper handling of objects in memory. This allows remote attackers to execute arbitrary code via malformed row property references, triggering access to an object that was not properly initialized or is deleted, leading to memory corruption. An attacker could exploit this by constructing a specially crafted Web page, potentially gaining the same user rights as the logged-on user. If the user has administrative rights, the attacker could take complete control of the affected system, allowing them to install programs, view, change, or delete data, or create new accounts with full user rights.

Recommendations: For Microsoft Internet Explorer 8 on all affected platforms, update to a version that properly handles objects in memory to prevent remote code execution. As a temporary workaround, consider restricting access to specially crafted Web pages that could exploit the memory corruption issue until a patch is available. Avoid using Internet Explorer 8 for sensitive operations until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2009-1532

Affected Products

Internet Explorer

Internet Explorer 8

Server 2003

Server 2008

Vista

Windows Xp

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2009-1532 · Security Note
• http://vupen.com/english/advisories/2009/1538 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-1532 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-019 · Vendor Advisory
• http://securitytracker.com/id?1022350 · Note
• https://docs.microsoft.com/security-updates/securitybulletins/2009/MS09-019 · Note
• http://securityfocus.com/archive/1/504208/100/0/threaded · Note
• https://t.me/cvenotify/108042 · Telegram Post
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6244 · Note
• http://us-cert.gov/cas/techalerts/TA09-160A.html · Note
• http://osvdb.org/54951 · Note
• http://zerodayinitiative.com/advisories/ZDI-09-041 · Note