NVD Vulnerability Detail
Search Exploit, PoC
CVE-2009-0551
Summary

Microsoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server 2003 SP1 and SP2, 7 on Windows Vista Gold and SP1, and 7 on Windows Server 2008 does not properly handle transition errors in a request for one HTTP document followed by a request for a second HTTP document, which allows remote attackers to execute arbitrary code via vectors involving (1) multiple crafted pages on a web site or (2) a web page with crafted inline content such as banner advertisements, aka "Page Transition Memory Corruption Vulnerability."

Publication Date April 15, 2009, 5 p.m.
Registration Date Jan. 29, 2021, 1:14 p.m.
Last Update Oct. 22, 2024, 2:35 a.m.
CVSS2.0 : HIGH
Score 9.3
Vector AV:N/AC:M/Au:N/C:C/I:C/A:C
攻撃元区分(AV) ネットワーク
攻撃条件の複雑さ(AC) 中
攻撃前の認証要否(Au) 不要
機密性への影響(C) 高
完全性への影響(I) 高
可用性への影響(A) 高
Get all privileges. いいえ
Get user privileges いいえ
Get other privileges いいえ
User operation required はい
Affected software configurations
Configuration1 or higher or less more than less than
cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*
2 cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*
3 cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*
4 cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
5 cpe:2.3:o:microsoft:windows_xp:*:sp2:pro_x64:*:*:*:*:*
6 cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
7 cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
8 cpe:2.3:o:microsoft:windows_xp:*:*:pro_x64:*:*:*:*:*
Configuration2 or higher or less more than less than
cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*
execution environment
1 cpe:2.3:o:microsoft:windows_server_2003:*:*:*:*:*:*:*:*
2 cpe:2.3:o:microsoft:windows_server_2003:*:sp1:*:*:*:*:*:*
3 cpe:2.3:o:microsoft:windows_server_2003:*:sp1:itanium:*:*:*:*:*
4 cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
5 cpe:2.3:o:microsoft:windows_server_2008:*:*:itanium:*:*:*:*:*
6 cpe:2.3:o:microsoft:windows_server_2008:*:*:*:*:*:*:*:*
7 cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*
8 cpe:2.3:o:microsoft:windows_server_2008:*:*:32_bit:*:*:*:*:*
9 cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*
10 cpe:2.3:o:microsoft:windows_vista:*:*:x64:*:*:*:*:*
11 cpe:2.3:o:microsoft:windows_vista:*:sp1:*:*:*:*:*:*
12 cpe:2.3:o:microsoft:windows_vista:gold:*:*:*:*:*:*:*
13 cpe:2.3:o:microsoft:windows_xp:*:sp2:*:*:*:*:*:*
14 cpe:2.3:o:microsoft:windows_xp:*:sp2:x64:*:*:*:*:*
15 cpe:2.3:o:microsoft:windows_xp:*:sp3:*:*:*:*:*:*
16 cpe:2.3:o:microsoft:windows_xp:*:*:x64:*:*:*:*:*
Configuration3 or higher or less more than less than
cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*
execution environment
1 cpe:2.3:o:microsoft:windows_2000:*:sp4:*:*:*:*:*:*
Related information, measures and tools
Common Vulnerabilities List