← Database

CVE-2008-2254

CRITICAL CVSS: 9.3 Published: 2008-08-13 Modified: 2026-06-16

Description

Microsoft Internet Explorer 6 and 7 accesses uninitialized memory, which allows remote attackers to cause a denial of service (crash) and execute arbitrary code via unknown vectors, aka "HTML Object Memory Corruption Vulnerability."

Affected Platforms

Microsoft Internet Explorer

Weakness Type

CWE-399

References