<< Back
CVE Number Vulnerability Product Severity Date
MS08-031 Cumulative Security Update for Internet Explorer (950759) Microsoft Internet Critical 11-06-2008

Technical Information

Brief overview of the risk:
A remote code execution vulnerability exists in the way Internet Explorer displays a Web page that contains certain unexpected method calls to HTML objects.
Detailed Information on the risk:
An attacker could exploit the vulnerability by constructing a specially crafted Web page. When a user views the Web page, the vulnerability could allow remote code execution. An attacker who successfully exploited this vulnerability could gain the same user rights as the logged-on user.Further information on this exploit is available at : MS08-031

Affected Software

Microsoft Internet Explorer 5.01 Service Pack 4
Microsoft Internet Explorer 6 Service Pack 1
Microsoft Internet Explorer 6
Windows Internet Explorer 7