CVE-2009-1547

Published: 14/10/2009 Updated: 07/12/2023

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 940

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Unspecified vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 allows remote malicious users to execute arbitrary code via a crafted data stream header that triggers memory corruption, aka "Data Stream Header Corruption Vulnerability."

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft internet explorer 5.01
microsoft internet explorer 6
microsoft windows 2000
microsoft windows server 2003
microsoft windows xp
microsoft windows xp -
microsoft internet explorer 7
microsoft windows server 2008
microsoft windows server 2008 -
microsoft windows vista
microsoft windows vista -
microsoft internet explorer 8
microsoft windows 7 -

MSIE Content-Encoding: deflate memory corruption vulnerability (aka MSRC 8769, MS09-054, CVE-2009-1547, “Data Stream Header Corruption Vulnerability”) Microsoft fixed a bug in Internet Explorer’s “Content-Encoding:deflate” implementation Here are two HTTP replies that trigger the bug: HTTP/\nContent-Encoding:deflate\r\t\n\r\n\x20\ ...

source: wwwsecurityfocuscom/bid/36622/info Microsoft Internet Explorer is prone to a remote code-execution vulnerability Attackers can exploit this issue to execute arbitrary code in the context of the user running the application Successful exploits will compromise the application and possibly the computer Failed attacks may cause de ...

Microsoft Internet Explorer suffers from a Content-Encoding: deflate memory corruption vulnerability ...

CWE-94 http://www.us-cert.gov/cas/techalerts/TA09-286A.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6454 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-054 https://nvd.nist.gov https://www.exploit-db.com/exploits/9893/

CVE-2009-1547

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect