VULNERABILITY INTELLIGENCE

CVE-2008-3476

CVSS score9.3 HIGH
EPSS probability31.10%
CISA KEVNot currently listed
Published2008-10-15
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle errors associated with access to uninitialized memory, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "HTML Objects Memory Corruption Vulnerability."

Primary references