CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-0077

Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote attackers to execute arbitrary code by assigning malformed values to certain properties, as demonstrated using the by property of an animateMotion SVG element, aka "Property Memory Corruption Vulnerability."

Exploit prediction scoring system (EPSS) score

EPSS Score 0.65

EPSS Ranking 98.4%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 9.3

References

Products affected by CVE-2008-0077

Microsoft » Internet Explorer » Version: 6

cpe:2.3:a:microsoft:internet_explorer:6
Microsoft » Internet Explorer » Version: 7

cpe:2.3:a:microsoft:internet_explorer:7
Microsoft » Windows 2000 » Version: N/A

cpe:2.3:o:microsoft:windows_2000:-
Microsoft » Windows 2003 Server » Version: N/A

cpe:2.3:o:microsoft:windows_2003_server:-
Microsoft » Windows Server 2003 » Version: N/A

cpe:2.3:o:microsoft:windows_server_2003:-
Microsoft » Windows Server 2003 » Version: r2

cpe:2.3:o:microsoft:windows_server_2003:r2
Microsoft » Windows Vista » Version: N/A

cpe:2.3:o:microsoft:windows_vista:-
Microsoft » Windows Xp » Version: N/A

cpe:2.3:o:microsoft:windows_xp:-

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2008-0077

Products

Pricing

Contact Us