CVE-2008-5750: Code Injection
Published Dec 29, 2008
·Updated
Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI.
Affected Software
4 affected components
Microsoft Internet Explorer=8-beta2
Microsoft Windows XP=sp3
All of the following
Microsoft Internet Explorer=8-beta2
Microsoft Windows XP=sp3
Event History
Dec 29, 2008
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Data Sourced
03:24 PM
DescriptionWeaknessAffected Software
Data Sourced
via NVD·03:24 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-5750?
CVE-2008-5750 is considered a critical vulnerability due to its potential for remote command execution.
2
How do I fix CVE-2008-5750?
To mitigate CVE-2008-5750, users should upgrade to a patched version of Internet Explorer.
3
Which systems are affected by CVE-2008-5750?
CVE-2008-5750 specifically affects Microsoft Internet Explorer 8 beta 2 on Windows XP SP3.
4
What type of attacks can exploit CVE-2008-5750?
CVE-2008-5750 can be exploited through crafted chromehtml: URIs that utilize the --renderer-path option.
5
Is there a workaround for CVE-2008-5750?
Disabling or avoiding the use of Internet Explorer 8 beta 2 can serve as a temporary workaround for CVE-2008-5750.