← Database

CVE-2009-1528

CRITICAL CVSS: 9.3 Published: 2009-06-10 Modified: 2026-06-16

Description

Microsoft Internet Explorer 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly synchronize AJAX requests, which allows allows remote attackers to execute arbitrary code via a large number of concurrent, asynchronous XMLHttpRequest calls, aka "HTML Object Memory Corruption Vulnerability."

Affected Platforms

Microsoft Windows XpMicrosoft Windows Server 2003Microsoft Windows Server 2008Microsoft Windows VistaMicrosoft Internet Explorer

Weakness Type

CWE-399

References