deardaniel/secdata-raw huggingface dataset:
CVE: CVE-2009-1139
Published: 2009-06-10
Description: Memory leak in the LDAP service in Active Directory on Microsoft Windows 2000 SP4 and Server 2003 SP2, and Active Directory Application Mode (ADAM) on Windows XP SP2 and SP3 and Server 2003 SP2, allows remote attackers to cause a denial of service (memory consumption and service outage) via (1) LDAP or (2) LDAPS requests with unspecified OID filters, aka "Active Directory Memory Leak Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-399
References: http://osvdb.org/54938; http://secunia.com/advisories/35355; http://support.avaya.com/elmodocs2/security/ASA-2009-214.htm
CVE: CVE-2009-1533
Published: 2009-06-10
Description: Buffer overflow in the Works for Windows document converters in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, Office 2007 SP1, and Works 8.5 and 9 allows remote attackers to execute arbitrary code via a crafted Works .wps file that triggers memory corruption, aka "File Converter Buffer Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-119
References: http://blogs.technet.com/srd/archive/2009/06/09/ms09-024.aspx; http://jvn.jp/en/jp/JVN70858401/index.html; http://osvdb.org/54939
CVE: CVE-2009-1695
Published: 2009-06-10
Description: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors involving access to frame contents after completion of a page transition.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2009-1696
Published: 2009-06-10
Description: WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 uses predictable random numbers in JavaScript applications, which makes it easier for remote web servers to track the behavior of a Safari user during a session.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-310
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2009-1697
Published: 2009-06-10
Description: CRLF injection vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject HTTP headers and bypass the Same Origin Policy via a crafted HTML document, related to cross-site scripting (XSS) attacks that depend on communication with arbitrary web sites on the same server through use of XMLHttpRequest without a Host header.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-20
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2009-1698
Published: 2009-06-10
Description: WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not initialize a pointer during handling of a Cascading Style Sheets (CSS) attr function call with a large numerical argument, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted HTML document.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://blog.zoller.lu/2009/05/advisory-apple-safari-remote-code.html; http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html
CVE: CVE-2009-1699
Published: 2009-06-10
Description: The XSL stylesheet implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle XML external entities, which allows remote attackers to read arbitrary files via a crafted DTD, as demonstrated by a file:///etc/passwd URL in an entity declaration, related to an "XXE attack."
CVSS Score: 7.5 (HIGH)
CWE: CWE-611
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2009-1700
Published: 2009-06-10
Description: The XSLT implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 does not properly handle redirects, which allows remote attackers to read XML content from arbitrary web pages via a crafted document.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2009-1701
Published: 2009-06-10
Description: Use-after-free vulnerability in the JavaScript DOM implementation in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) by destroying a document.body element that has an unspecified XML container with elements that support the dir attribute.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2009-1702
Published: 2009-06-10
Description: Cross-site scripting (XSS) vulnerability in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2.1, and iPhone OS for iPod touch 1.1 through 2.2.1 allows remote attackers to inject arbitrary web script or HTML via vectors related to improper handling of Location and History objects.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html; http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html
CVE: CVE-2009-1703
Published: 2009-06-10
Description: WebKit in Apple Safari before 4.0 does not prevent references to file: URLs within (1) audio and (2) video elements, which allows remote attackers to determine the existence of arbitrary files via a crafted HTML document.
CVSS Score: 7.1 (HIGH)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html; http://osvdb.org/55009
CVE: CVE-2009-1704
Published: 2009-06-10
Description: CFNetwork in Apple Safari before 4.0 misinterprets downloaded image files as local HTML documents in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript code by placing it in an image file.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://osvdb.org/55010; http://secunia.com/advisories/35379
CVE: CVE-2009-1705
Published: 2009-06-10
Description: CoreGraphics in Apple Safari before 4.0 on Windows does not properly use arithmetic during automatic hinting of TrueType fonts, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted font data.
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://osvdb.org/54974; http://secunia.com/advisories/35379
CVE: CVE-2009-1706
Published: 2009-06-10
Description: The Private Browsing feature in Apple Safari before 4.0 on Windows does not remove cookies from the alternate cookie store in unspecified circumstances upon (1) disabling of the feature or (2) exit of the application, which makes it easier for remote web servers to track users via a cookie.
CVSS Score: 5.0 (MEDIUM)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://osvdb.org/54997; http://secunia.com/advisories/35379
CVE: CVE-2009-1707
Published: 2009-06-10
Description: Race condition in the Reset Safari implementation in Apple Safari before 4.0 on Windows might allow local users to read stored web-site passwords via unspecified vectors.
CVSS Score: 1.2 (LOW)
CWE: CWE-362
References: http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.apple.com/archives/security-announce/2010//Nov/msg00003.html; http://osvdb.org/55012
CVE: CVE-2009-1708
Published: 2009-06-10
Description: Apple Safari before 4.0 does not prevent calls to the open-help-anchor URL handler by web sites, which allows remote attackers to open arbitrary local help files, and execute arbitrary code or obtain sensitive information, via a crafted call.
CVSS Score: 9.3 (HIGH)
References: http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://osvdb.org/55011; http://secunia.com/advisories/35379
CVE: CVE-2009-1709
Published: 2009-06-10
Description: Use-after-free vulnerability in the garbage-collection implementation in WebCore in WebKit in Apple Safari before 4.0 allows remote attackers to execute arbitrary code or cause a denial of service (heap corruption and application crash) via an SVG animation element, related to SVG set objects, SVG marker elements, the targetElement attribute, and unspecified "caches."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html; http://osvdb.org/55013
CVE: CVE-2009-1710
Published: 2009-06-10
Description: WebKit in Apple Safari before 4.0 allows remote attackers to spoof the browser's display of (1) the host name, (2) security indicators, and unspecified other UI elements via a custom cursor in conjunction with a modified CSS3 hotspot property.
CVSS Score: 2.6 (LOW)
References: http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html; http://osvdb.org/55014
CVE: CVE-2009-1711
Published: 2009-06-10
Description: WebKit in Apple Safari before 4.0 does not properly initialize memory for Attr DOM objects, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document.
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html; http://osvdb.org/55015
CVE: CVE-2009-1712
Published: 2009-06-10
Description: WebKit in Apple Safari before 4.0 does not prevent remote loading of local Java applets, which allows remote attackers to execute arbitrary code, gain privileges, or obtain sensitive information via an APPLET or OBJECT element.
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html; http://osvdb.org/55022
CVE: CVE-2009-1713
Published: 2009-06-10
Description: The XSLT functionality in WebKit in Apple Safari before 4.0 does not properly implement the document function, which allows remote attackers to read (1) arbitrary local files and (2) files from different security zones via unspecified vectors.
CVSS Score: 7.1 (HIGH)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html; http://osvdb.org/54975
CVE: CVE-2009-1714
Published: 2009-06-10
Description: Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to the improper escaping of HTML attributes.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html; http://osvdb.org/55023
CVE: CVE-2009-1715
Published: 2009-06-10
Description: Cross-site scripting (XSS) vulnerability in Web Inspector in WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to inject arbitrary web script or HTML, and read local files, via vectors related to script execution with incorrect privileges.
CVSS Score: 4.3 (MEDIUM)
CWE: CWE-79
References: http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html; http://osvdb.org/54996
CVE: CVE-2009-1716
Published: 2009-06-10
Description: CFNetwork in Apple Safari before 4.0 on Windows does not properly protect the temporary files created for downloads, which allows local users to obtain sensitive information by reading these files.
CVSS Score: 2.1 (LOW)
CWE: CWE-264
References: http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://secunia.com/advisories/35379; http://securitytracker.com/id?1022342
CVE: CVE-2009-1718
Published: 2009-06-10
Description: WebKit in Apple Safari before 4.0 allows user-assisted remote attackers to obtain sensitive information via vectors involving drag events and the dragging of content over a crafted web page.
CVSS Score: 7.1 (HIGH)
CWE: CWE-200
References: http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html; http://lists.opensuse.org/opensuse-security-announce/2011-01/msg00006.html; http://secunia.com/advisories/35379
CVE: CVE-2009-0549
Published: 2009-06-10
Description: Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Open XML File Format Converter for Mac; and Microsoft Office Excel Viewer 2003 SP3 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Record Pointer Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://osvdb.org/54952; http://www.securityfocus.com/bid/35215; http://www.securitytracker.com/id?1022351
CVE: CVE-2009-0557
Published: 2009-06-10
Description: Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Object Record Corruption Vulnerability."
CVSS Score: 7.8 (HIGH)
CWE: CWE-94, CWE-94
References: http://osvdb.org/54953; http://www.securityfocus.com/bid/35241; http://www.securitytracker.com/id?1022351
CVE: CVE-2009-0558
Published: 2009-06-10
Description: Array index error in Excel in Microsoft Office 2000 SP3 and Office 2004 and 2008 for Mac, and Open XML File Format Converter for Mac, allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Array Indexing Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://osvdb.org/54954; http://secunia.com/secunia_research/2009-1/; http://www.securityfocus.com/archive/1/504188/100/0/threaded
CVE: CVE-2009-0559
Published: 2009-06-10
Description: Stack-based buffer overflow in Excel in Microsoft Office 2000 SP3 and Office XP SP3 allows remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "String Copy Stack-Based Overrun Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://www.securityfocus.com/bid/35243; http://www.securitytracker.com/id?1022351; http://www.us-cert.gov/cas/techalerts/TA09-160A.html
CVE: CVE-2009-0560
Published: 2009-06-10
Description: Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a crafted Excel file with a malformed record object, aka "Field Sanitization Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://osvdb.org/54956; http://www.securityfocus.com/bid/35244; http://www.securitytracker.com/id?1022351
CVE: CVE-2009-0561
Published: 2009-06-10
Description: Integer overflow in Excel in Microsoft Office 2000 SP3, Office XP SP3, Office 2003 SP3, and Office 2004 and 2008 for Mac; Excel in 2007 Microsoft Office System SP1 and SP2; Open XML File Format Converter for Mac; Microsoft Office Excel Viewer 2003 SP3; Microsoft Office Excel Viewer; Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2; and Microsoft Office SharePoint Server 2007 SP1 and SP2 allows remote attackers to execute arbitrary code via an Excel file with a Shared String Table (SST) record with a numeric field that specifies an invalid number of unique strings, which triggers a heap-based buffer overflow, aka "Record Integer Overflow Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-189
References: http://labs.idefense.com/intelligence/vulnerabilities/display.php?id=805; http://osvdb.org/54957; http://secunia.com/secunia_research/2009-12/
CVE: CVE-2009-1122
Published: 2009-06-10
Description: The WebDAV extension in Microsoft Internet Information Services (IIS) 5.0 on Windows 2000 SP4 does not properly decode URLs, which allows remote attackers to bypass authentication, and possibly read or create files, via a crafted HTTP request, aka "IIS 5.0 WebDAV Authentication Bypass Vulnerability," a different vulnerability than CVE-2009-1535.
CVSS Score: 7.5 (HIGH)
CWE: CWE-287
References: http://www.attrition.org/pipermail/vim/2009-June/002192.html; http://www.securityfocus.com/bid/35232; http://www.securitytracker.com/id?1022358
CVE: CVE-2009-1123
Published: 2009-06-10
Description: The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate changes to unspecified kernel objects, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Desktop Vulnerability."
CVSS Score: 7.8 (HIGH)
References: http://osvdb.org/54940; http://secunia.com/advisories/35372; http://www.securitytracker.com/id?1022359
CVE: CVE-2009-1124
Published: 2009-06-10
Description: The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate user-mode pointers in unspecified error conditions, which allows local users to gain privileges via a crafted application, aka "Windows Kernel Pointer Validation Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://osvdb.org/54941; http://secunia.com/advisories/35372; http://www.securityfocus.com/bid/35238
CVE: CVE-2009-1125
Published: 2009-06-10
Description: The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP2, Vista Gold, SP1, and SP2, and Server 2008 SP2 does not properly validate an argument to an unspecified system call, which allows local users to gain privileges via a crafted application, aka "Windows Driver Class Registration Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://osvdb.org/54942; http://secunia.com/advisories/35372; http://www.securityfocus.com/bid/35240
CVE: CVE-2009-1126
Published: 2009-06-10
Description: The kernel in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly validate the user-mode input associated with the editing of an unspecified desktop parameter, which allows local users to gain privileges via a crafted application, aka "Windows Desktop Parameter Edit Vulnerability."
CVSS Score: 7.2 (HIGH)
CWE: CWE-20
References: http://osvdb.org/54943; http://secunia.com/advisories/35372; http://www.securitytracker.com/id?1022359
CVE: CVE-2009-1134
Published: 2009-06-10
Description: Excel in 2007 Microsoft Office System SP1 and SP2; Microsoft Office Excel Viewer; and Microsoft Office Compatibility Pack for Word, Excel, and PowerPoint 2007 File Formats SP1 and SP2 allow remote attackers to execute arbitrary code via a BIFF file with a malformed Qsir (0x806) record object, aka "Record Pointer Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-94
References: http://osvdb.org/54958; http://www.securityfocus.com/archive/1/504213/100/0/threaded; http://www.securityfocus.com/bid/35246
CVE: CVE-2009-1140
Published: 2009-06-10
Description: Microsoft Internet Explorer 5.01 SP4; 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not prevent HTML rendering of cached content, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Cross-Domain Information Disclosure Vulnerability."
CVSS Score: 7.1 (HIGH)
CWE: CWE-200
References: http://www.securitytracker.com/id?1022350; http://www.us-cert.gov/cas/techalerts/TA09-160A.html; http://www.vupen.com/english/advisories/2009/1538
CVE: CVE-2009-1141
Published: 2009-06-10
Description: Microsoft Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via unspecified DHTML function calls related to a tr element and the "insertion, deletion and attributes of a table cell," which trigger memory corruption when the window is destroyed, aka "DHTML Object Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://www.fortiguardcenter.com/advisory/FGA-2009-22.html; http://www.securityfocus.com/archive/1/504207/100/0/threaded; http://www.securitytracker.com/id?1022350
CVE: CVE-2009-1528
Published: 2009-06-10
Description: Microsoft Internet Explorer 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly synchronize AJAX requests, which allows allows remote attackers to execute arbitrary code via a large number of concurrent, asynchronous XMLHttpRequest calls, aka "HTML Object Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://osvdb.org/54947; http://www.securityfocus.com/archive/1/504206/100/0/threaded; http://www.securityfocus.com/bid/35222
CVE: CVE-2009-1529
Published: 2009-06-10
Description: Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by calling the setCapture method on a collection of crafted objects, aka "Uninitialized Memory Corruption Vulnerability."
CVSS Score: 8.1 (HIGH)
CWE: CWE-399, CWE-908
References: http://osvdb.org/54948; http://www.securityfocus.com/archive/1/504205/100/0/threaded; http://www.securityfocus.com/bid/35223
CVE: CVE-2009-1530
Published: 2009-06-10
Description: Use-after-free vulnerability in Microsoft Internet Explorer 7 for Windows XP SP2 and SP3; 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 allows remote attackers to execute arbitrary code by repeatedly adding HTML document nodes and calling event handlers, which triggers an access of an object that (1) was not properly initialized or (2) is deleted, aka "HTML Objects Memory Corruption Vulnerability."
CVSS Score: 9.3 (HIGH)
CWE: CWE-399
References: http://osvdb.org/54949; http://www.securityfocus.com/archive/1/504209/100/0/threaded; http://www.securitytracker.com/id?1022350