CVE-2009-3671: Use After Free
Microsoft Internet Explorer 8 does not properly handle objects in memory, which allows remote attackers to execute arbitrary code by accessing an object that (1) was not properly initialized or (2) is deleted, leading to memory corruption, aka "Uninitialized Memory Corruption Vulnerability," a different vulnerability than CVE-2009-3674.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2009-3671?
CVE-2009-3671 has a high severity rating due to its potential for allowing remote code execution on affected systems.
How do I fix CVE-2009-3671?
To fix CVE-2009-3671, users should update Microsoft Internet Explorer to the latest version or apply the recommended patches from Microsoft.
What versions of Internet Explorer are affected by CVE-2009-3671?
CVE-2009-3671 affects Internet Explorer versions 5.0.1 up to 8 on various Windows operating systems.
What types of attacks can exploit CVE-2009-3671?
CVE-2009-3671 can be exploited via specially crafted web pages, which can lead to memory corruption and arbitrary code execution.
Which operating systems are vulnerable to CVE-2009-3671?
CVE-2009-3671 affects several Windows operating systems including Windows XP, Windows Vista, Windows Server 2003, and Windows 7.