ie

8 SP3

OTHER 1 CVE

9

SINGLE_NUMBER 1 CVE

Windows Server 2008 SP2

OTHER 1 CVE

6.0

MAJOR_MINOR 1 CVE

8 SP1

OTHER 1 CVE

8 SP2

OTHER 1 CVE

Windows Server 2008

OTHER 1 CVE

6 SP1

OTHER 1 CVE

5.0.1

SEMANTIC 1 CVE

8

SINGLE_NUMBER 4 CVEs

Windows XP SP3

OTHER 2 CVEs

Windows Vista SP2

OTHER 1 CVE

Windows Server 2003 SP1

OTHER 1 CVE

Windows Server 2003 SP2

OTHER 2 CVEs

7

SINGLE_NUMBER 2 CVEs

Windows XP SP2

OTHER 2 CVEs

6

SINGLE_NUMBER 2 CVEs

8.0

MAJOR_MINOR 1 CVE

Windows Vista SP1

OTHER 2 CVEs

Windows Vista Gold

OTHER 2 CVEs

CVE-2012-4792

Use-after-free vulnerability in Microsoft Internet Explorer 6 through 8 allows remote attackers to execute arbitrary code via a crafted web site that triggers access to an object that (1) was not properly allocated or (2) is deleted, as demonstrated by a CDwnBindInfo object, and exploited in the wild in December 2012.

HIGH Dec 30, 2012

CVE-2012-1539

Use-after-free vulnerability in Microsoft Internet Explorer 9 allows remote attackers to execute arbitrary code via a crafted web site, aka "CTreePos Use After Free Vulnerability."

UNKNOWN Nov 14, 2012

CVE-2010-1260

The IE8 Developer Toolbar in Microsoft Internet Explorer 8 SP1, SP2, and SP3 allows user-assisted remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Element Memory Corruption Vulnerability."

UNKNOWN Jun 08, 2010

CVE-2010-0492

Use-after-free vulnerability in mstime.dll in Microsoft Internet Explorer 8 allows remote attackers to execute arbitrary code via vectors related to the TIME2 behavior, the CTimeAction object, and destruction of markup, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability."

UNKNOWN Mar 31, 2010

CVE-2010-0248

Microsoft Internet Explorer 6, 6 SP1, 7, and 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "HTML Object Memory Corruption Vulnerability."

UNKNOWN Jan 22, 2010

CVE-2009-3671

Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3674.

UNKNOWN Dec 09, 2009

CVE-2009-2529

Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not properly handle argument validation for unspecified variables, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "HTML Component Handling Vulnerability."

UNKNOWN Oct 14, 2009