CVE-2008-4844

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

66.51%

Published

Dec 11, 2008

Modified

Apr 22, 2026

Public PoC / Exploit (4)

All weaponized →

Exploit-DBMicrosoft Internet Explorer (Windows Vista) - XML Parsing Buffer Overflow Exploit-DBMicrosoft Internet Explorer - Data Binding Memory Corruption (MS08-078) (Metasploit)Exploit-DBMicrosoft Internet Explorer - XML Parsing Remote Buffer Overflow TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving (1) an XML Island, (2) XML DSOs, or (3) Tabular Data Control (TDC) in a crafted HTML or XML document, as demonstrated by nested SPAN or MARQUEE elements, and exploited in the wild in December 2008.

Weaknesses (CWE)

CWE-399

Affected Products (4)

microsoft · internet_explorervulnerable

References (20)

http://blogs.msdn.com/sdl/archive/2008/12/18/ms08-078-and-the-sdl.aspx

http://code.google.com/p/inception-h2hc/

http://isc.sans.org/diary.html?storyid=5458

Exploit

http://marc.info/?l=bugtraq&m=123015308222620&w=2

http://secunia.com/advisories/33089

PatchVendor Advisory