CVE-2009-0552

EUVD-2009-0556
Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6 SP1, 6 on Windows XP SP2 and SP3, and 6 on Windows Server 2003 SP1 and SP2 allows remote attackers to execute arbitrary code via a web page that triggers presence of an object in memory that was (1) not properly initialized or (2) deleted, aka "Uninitialized Memory Corruption Vulnerability."
Code Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.3 UNKNOWN
NETWORK
MEDIUM
AV:N/AC:M/Au:N/C:C/I:C/A:C
Base Score
CVSS 3.x
EPSS Score
Percentile: 97%
Affected Products (NVD)
VendorProductVersion
microsoftie
6.0:sp1
microsoftinternet_explorer
5.0.1:sp4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://osvdb.org/53625
http://secunia.com/advisories/34678
http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm
http://www.securitytracker.com/id?1022042
http://www.us-cert.gov/cas/techalerts/TA09-104A.html
http://www.vupen.com/english/advisories/2009/1028
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5551
http://osvdb.org/53625
http://secunia.com/advisories/34678
http://support.avaya.com/elmodocs2/security/ASA-2009-133.htm
http://www.securitytracker.com/id?1022042
http://www.us-cert.gov/cas/techalerts/TA09-104A.html
http://www.vupen.com/english/advisories/2009/1028
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-014
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5551