CVE-2009-1141: Critical severity internet explorer vulnerability

Published Jun 10, 2009

Updated

Microsoft Internet Explorer 6 for Windows XP SP2 and SP3 and Server 2003 SP2 allows remote attackers to execute arbitrary code via unspecified DHTML function calls related to a tr element and the "insertion, deletion and attributes of a table cell," which trigger memory corruption when the window is destroyed, aka "DHTML Object Memory Corruption Vulnerability."

Affected Software

9 affected components

Microsoft Internet Explorer=6

Microsoft Windows Server 2003

Microsoft Windows Server 2003=sp1

Microsoft Windows Server 2003=sp2

Microsoft Windows XP

Microsoft Windows XP=sp2

Microsoft Windows XP=sp3

Event History

Jun 10, 2009

CVE Published

via MITRE·06:00 PM

Data Sourced

via MITRE·06:00 PM

Description

Data Sourced

06:30 PM

DescriptionWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2009-1141?

CVE-2009-1141 is rated as a critical vulnerability due to its potential to allow remote code execution.

How do I fix CVE-2009-1141?

To fix CVE-2009-1141, users should update Internet Explorer to a version that is no longer vulnerable.

What versions are affected by CVE-2009-1141?

CVE-2009-1141 affects Microsoft Internet Explorer 6 on Windows XP SP2 and SP3, as well as Server 2003 SP2.

What type of attacks does CVE-2009-1141 facilitate?

CVE-2009-1141 facilitates remote code execution attacks through memory corruption.

Is there a workaround for CVE-2009-1141?

There are no specific workarounds for CVE-2009-1141; the best mitigation is to update the affected software.