Revision Date: | 2014-08-18 | Version: | 50 | Title: | Uninitialized Memory Corruption Vulnerability (CVE-2009-3673) | Description: | Microsoft Internet Explorer 7 and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability." | Family: | windows | Class: | vulnerability | Status: | ACCEPTED | Reference(s): | CVE-2009-3673
| Platform(s): | Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows XP
| Product(s): | Microsoft Internet Explorer
| Definition Synopsis | IE7/XP x86/x64 XP x86/x64
Microsoft Windows XP (32-bit) is installed
OR Microsoft Windows XP x64 is installed
AND Microsoft Internet Explorer 7 is installed
AND Mshtml.dll version is greater than 7.0.6000.16000
AND Mshtml.dll version is less than 7.0.6000.16945
OR IE7/XP x86/x64
XP x86/x64
Microsoft Windows XP (32-bit) is installed
OR Microsoft Windows XP x64 is installed
AND Microsoft Internet Explorer 7 is installed
AND Mshtml.dll version is greater than 7.0.6000.20000
AND Mshtml.dll version is less than 7.0.6000.21148
OR IE7/Server 2003 x86/x64/ia64
Server 2003 x86/x64/ia64
Microsoft Windows Server 2003 (32-bit) is installed
OR Microsoft Windows Server 2003 (x64) is installed
OR Microsoft Windows Server 2003 (ia64) Gold is installed
AND Microsoft Internet Explorer 7 is installed
AND Mshtml.dll version is greater than 7.0.6000.16000
AND Mshtml.dll version is less than 7.0.6000.16945
OR IE7/Server 2003 x86/x64/ia64
Server 2003 x86/x64/ia64
Microsoft Windows Server 2003 (32-bit) is installed
OR Microsoft Windows Server 2003 (x64) is installed
OR Microsoft Windows Server 2003 (ia64) Gold is installed
AND Microsoft Internet Explorer 7 is installed
AND Mshtml.dll version is greater than 7.0.6000.20000
AND Mshtml.dll version is less than 7.0.6000.21148
OR IE7/Vista x86/x64
Vista x86/x64
Microsoft Windows Vista (32-bit) is installed
OR Microsoft Windows Vista x64 Edition is installed
AND Microsoft Internet Explorer 7 is installed
AND Mshtml.dll version is greater than 7.0.6000.16000
AND Mshtml.dll version is less than 7.0.6000.16945
OR IE7/Vista x86/x64
Vista x86/x64
Microsoft Windows Vista (32-bit) is installed
OR Microsoft Windows Vista x64 Edition is installed
AND Microsoft Internet Explorer 7 is installed
AND Mshtml.dll version is greater than 7.0.6000.20000
AND Mshtml.dll version is less than 7.0.6000.21148
OR IE7/Vista x86/x64, Server 2008 x86/x64/ia64
Vista x86/x64, Server 2008 x86/x64/ia64
Microsoft Windows Vista (32-bit) is installed
OR Microsoft Windows Vista x64 Edition is installed
OR Microsoft Windows Server 2008 (32-bit) is installed
OR Microsoft Windows Server 2008 (64-bit) is installed
OR Microsoft Windows Server 2008 (ia-64) is installed
AND Microsoft Internet Explorer 7 is installed
AND Mshtml.dll version is greater than 7.0.6001.16000
AND Mshtml.dll version is less than 7.0.6001.18349
OR IE7/Vista x86/x64, Server 2008 x86/x64/ia64
Vista x86/x64, Server 2008 x86/x64/ia64
Microsoft Windows Vista (32-bit) is installed
OR Microsoft Windows Vista x64 Edition is installed
OR Microsoft Windows Server 2008 (32-bit) is installed
OR Microsoft Windows Server 2008 (64-bit) is installed
OR Microsoft Windows Server 2008 (ia-64) is installed
AND Microsoft Internet Explorer 7 is installed
AND Mshtml.dll version is greater than 7.0.6001.20000
AND Mshtml.dll version is less than 7.0.6001.22550
OR IE7/Vista x86/x64, Server 2008 x86/x64/ia64
Vista x86/x64, Server 2008 x86/x64/ia64
Microsoft Windows Vista (32-bit) is installed
OR Microsoft Windows Vista x64 Edition is installed
OR Microsoft Windows Server 2008 (32-bit) is installed
OR Microsoft Windows Server 2008 (64-bit) is installed
OR Microsoft Windows Server 2008 (ia-64) is installed
AND Microsoft Internet Explorer 7 is installed
AND Mshtml.dll version is greater than 7.0.6002.18000
AND Mshtml.dll version is less than 7.0.6002.18130
OR IE7/Vista x86/x64, Server 2008 x86/x64/ia64
Vista x86/x64, Server 2008 x86/x64/ia64
Microsoft Windows Vista (32-bit) is installed
OR Microsoft Windows Vista x64 Edition is installed
OR Microsoft Windows Server 2008 (32-bit) is installed
OR Microsoft Windows Server 2008 (64-bit) is installed
OR Microsoft Windows Server 2008 (ia-64) is installed
AND Microsoft Internet Explorer 7 is installed
AND Mshtml.dll version is greater than 7.0.6002.22000
AND Mshtml.dll version is less than 7.0.6002.22252
OR IE8/XP x86/x64, Server 2003 x86/x64
XP x86/x64, Server 2003 x86/x64
Microsoft Windows XP (32-bit) is installed
OR Microsoft Windows XP x64 is installed
OR Microsoft Windows Server 2003 (32-bit) is installed
OR Microsoft Windows Server 2003 (x64) is installed
AND Microsoft Internet Explorer 8 is installed
AND Mshtml.dll version is greater than 8.0.6001.18000
AND Mshtml.dll version is less than 8.0.6001.18854
OR IE8/XP x86/x64, Server 2003 x86/x64
XP x86/x64, Server 2003 x86/x64
Microsoft Windows XP (32-bit) is installed
OR Microsoft Windows XP x64 is installed
OR Microsoft Windows Server 2003 (32-bit) is installed
OR Microsoft Windows Server 2003 (x64) is installed
AND Microsoft Internet Explorer 8 is installed
AND Mshtml.dll version is greater than 8.0.6001.22000
AND Mshtml.dll version is less than 8.0.6001.22945
OR IE8/Vista x86/x64, Server 2008 x86/x64
Vista x86/x64, Server 2008 x86/x64
Microsoft Windows Vista (32-bit) is installed
OR Microsoft Windows Vista x64 Edition is installed
OR Microsoft Windows Server 2008 (32-bit) is installed
OR Microsoft Windows Server 2008 (64-bit) is installed
AND Microsoft Internet Explorer 8 is installed
AND Mshtml.dll version is greater than 8.0.6001.18000
AND Mshtml.dll version is less than 8.0.6001.18865
OR IE8/Vista x86/x64, Server 2008 x86/x64
Vista x86/x64, Server 2008 x86/x64
Microsoft Windows Vista (32-bit) is installed
OR Microsoft Windows Vista x64 Edition is installed
OR Microsoft Windows Server 2008 (32-bit) is installed
OR Microsoft Windows Server 2008 (64-bit) is installed
AND Microsoft Internet Explorer 8 is installed
AND Mshtml.dll version is greater than 8.0.6001.22000
AND Mshtml.dll version is less than 8.0.6001.22956
OR IE8/7 x86/x64, Server 2008 R2 x64/ia64
7 x86/x64, Server 2008 R2 x64/ia64
Microsoft Windows 7 (32-bit) is installed
OR Microsoft Windows 7 x64 Edition is installed
OR Microsoft Windows Server 2008 R2 x64 Edition is installed
OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
AND Microsoft Internet Explorer 8 is installed
AND Mshtml.dll version is greater than or equal 8.0.7600.16000
AND Mshtml.dll version is less than 8.0.7600.16466
OR IE8/7 x86/x64, Server 2008 R2 x64/ia64
7 x86/x64, Server 2008 R2 x64/ia64
Microsoft Windows 7 (32-bit) is installed
OR Microsoft Windows 7 x64 Edition is installed
OR Microsoft Windows Server 2008 R2 x64 Edition is installed
OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
AND Microsoft Internet Explorer 8 is installed
AND Mshtml.dll version is greater than or equal 8.0.7600.20000
AND Mshtml.dll version is less than 8.0.7600.20579
|
|