CVE-2008-1086: Code Injection
The HxTocCtrl ActiveX control (hxvz.dll), as used in Microsoft Internet Explorer 5.01 SP4 and 6 SP1, in Windows XP SP2, Server 2003 SP1 and SP2, Vista SP1, and Server 2008, allows remote attackers to execute arbitrary code via malformed arguments, which triggers memory corruption.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-1086?
CVE-2008-1086 has a critical severity rating due to its potential to allow remote code execution.
How do I fix CVE-2008-1086?
To fix CVE-2008-1086, it is recommended to apply the latest security updates provided by Microsoft.
Which systems are affected by CVE-2008-1086?
CVE-2008-1086 affects Microsoft Windows XP, Windows Server 2003, Windows Vista, and Internet Explorer versions 5.01 and 6.
Can CVE-2008-1086 be exploited remotely?
Yes, CVE-2008-1086 can be exploited remotely by attackers through maliciously crafted arguments.
What kind of attack methods leverage CVE-2008-1086?
Attackers can leverage CVE-2008-1086 through memory corruption vulnerabilities to execute arbitrary code.