CVE-2009-1547

CVSS 8.8 HIGHEPSS 37.4%CWE-94

Vexday Risk Score

53Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 8.8EPSS 37.4%KEV nãoPoC públicaNuclei —Metasploit —Patch referenciado

Lifecycle

13 Oct 2009Public PoC

14 Oct 2009Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via a crafted data stream header that triggers memory corruption, aka "Data Stream Header Corruption Vulnerability."

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/33270unverified exploitdbwww.exploit-db.com/exploits/9893unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6454 http://www.us-cert.gov/cas/techalerts/TA09-286A.html