← Database

CVE-2008-1442

CRITICAL CVSS: 9.3 Published: 2008-06-12 Modified: 2026-06-16

Description

Heap-based buffer overflow in the substringData method in Microsoft Internet Explorer 6 and 7 allows remote attackers to execute arbitrary code, related to an unspecified manipulation of a DOM object before a call to this method, aka the "HTML Objects Memory Corruption Vulnerability."

Affected Platforms

Microsoft Internet Explorer

Weakness Type

CWE-119

References