VULNERABILITY INTELLIGENCE
CVE-2008-0077
CVSS score8.8 HIGH
EPSS probability37.19%
CISA KEVNot currently listed
Published2008-02-12
Last modified2026-06-16
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Description
Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote attackers to execute arbitrary code by assigning malformed values to certain properties, as demonstrated using the by property of an animateMotion SVG element, aka "Property Memory Corruption Vulnerability."
Weakness classification
- CWE-416: Use After Free
Primary references
- secure@microsoft.com — Broken Link
- secure@microsoft.com — Mailing List
- secure@microsoft.com — Broken Link, Vendor Advisory
- secure@microsoft.com — Third Party Advisory, US Government Resource
- secure@microsoft.com — Broken Link, Third Party Advisory, VDB Entry
- secure@microsoft.com — Broken Link, Third Party Advisory, VDB Entry
- secure@microsoft.com — Broken Link, Third Party Advisory, VDB Entry
- secure@microsoft.com — Broken Link, Third Party Advisory, US Government Resource
- secure@microsoft.com — Broken Link, Vendor Advisory
- secure@microsoft.com — Third Party Advisory, VDB Entry
- secure@microsoft.com — Patch, Vendor Advisory
- secure@microsoft.com — Broken Link