{"id":"CVE-2009-0075","published":"2009-02-10T22:13:00Z","modified":"2024-08-07T04:24:17Z","title":"Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka \"Uninitialized Memory Corruption Vulnerability.\"","provenance":"source","from":"CVE.org"},"summary":{"text":"Microsoft Internet Explorer 7 contains an uninitialized memory corruption flaw in how it handles errors when accessing deleted objects, specifically related to CFunctionPointer and the appending of document objects. A remote attacker can execute arbitrary code by getting a victim to load a crafted HTML document.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:15:43Z"},"cvss":null,"epss":{"score":0.84636,"percentile":0.99703,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":{"dateAdded":"2010-05-01","exploitedFirstSeen":"2010-05-01","ransomware":false,"evidence":[{"url":"https://www.virusbulletin.com/virusbulletin/2010/05/exploit-kit-explosion-part-two-vectors-attack/","date":"2010-05-01"},{"url":"https://unit42.paloaltonetworks.com/unit42-the-old-and-new-current-trends-in-web-based-threats/","date":"2018-06-20"},{"url":"https://unit42.paloaltonetworks.com/unit42-web-based-threats-2018-q2-u-s-remains-1-malicious-web-addresses-china-falls-2-7/","date":"2018-09-05"}],"evidenceTotal":3,"provenance":"source"},"exploited":true,"otx":{"pulseCount":2,"pulses":[{"name":"CVE Data","url":"https://otx.alienvault.com/pulse/69929b597293fe5837b9c95c","created":"2026-02-16"},{"name":"CVE -CVE Reference Map for Source MS - Curios RE active candidates CVE version 20061101","url":"https://otx.alienvault.com/pulse/679c3446de4f362fac9217f9","created":"2025-01-31"}],"provenance":"machine"},"cwes":[],"references":[{"url":"https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6000","tags":["vdb-entry","signature","x_refsource_OVAL"]},{"url":"https://www.exploit-db.com/exploits/8082","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"http://www.zerodayinitiative.com/advisories/ZDI-09-011/","tags":["x_refsource_MISC"]},{"url":"http://www.securityfocus.com/bid/33627","tags":["vdb-entry","x_refsource_BID"]},{"url":"http://www.vupen.com/english/advisories/2009/0389","tags":["vdb-entry","x_refsource_VUPEN"]},{"url":"http://osvdb.org/51839","tags":["vdb-entry","x_refsource_OSVDB"]},{"url":"https://www.exploit-db.com/exploits/8079","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"https://www.exploit-db.com/exploits/8080","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"https://www.exploit-db.com/exploits/8077","tags":["exploit","x_refsource_EXPLOIT-DB"]},{"url":"http://www.us-cert.gov/cas/techalerts/TA09-041A.html","tags":["third-party-advisory","x_refsource_CERT"]},{"url":"https://docs.microsoft.com/en-us/security-updates/securitybulletins/2009/ms09-002","tags":["vendor-advisory","x_refsource_MS"]}],"techniques":[{"id":"T1189","name":"Drive-by Compromise","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: malicious HTML page drives browser exploitation","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"via a crafted HTML document","start":162,"end":189}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1203","name":"Exploitation for Client Execution","tactics":["execution"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: browser memory corruption yields code execution","mappingType":"primary_impact","evidence":[{"from":"description","quote":"allows remote attackers to execute arbitrary code","start":112,"end":161}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[{"id":"SRC-619721166ae9d9d7fdcd","title":"Microsoft Security","publisher":"download.microsoft.com","url":"https://download.microsoft.com/download/4/4/C/44CDEF0E-7924-4787-A56A-16261691ACE3/Microsoft_Security_Intelligence_Report_Volume_19_English.pdf","date":null,"mentions":[{"quote":"targeted CVE-2009-0075, an uninitialized memory corruption vulnerability","start":94937,"end":95009},{"quote":"CVE-2009-0075, 54","start":237927,"end":237944}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2009-0084","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2009-0084","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[{"id":8077,"url":"https://www.exploit-db.com/exploits/8077","title":"Microsoft Internet Explorer 7 - Memory Corruption (PoC) (MS09-002)","type":"dos","platform":"windows","date":"2009-02-18","verified":true,"provenance":"source"},{"id":8079,"url":"https://www.exploit-db.com/exploits/8079","title":"Microsoft Internet Explorer 7 (Windows XP SP2) - Memory Corruption (MS09-002)","type":"remote","platform":"windows","date":"2009-02-20","verified":true,"provenance":"source"},{"id":8080,"url":"https://www.exploit-db.com/exploits/8080","title":"Microsoft Internet Explorer 7 - Memory Corruption (MS09-002)","type":"remote","platform":"windows","date":"2009-02-20","verified":true,"provenance":"source"},{"id":8082,"url":"https://www.exploit-db.com/exploits/8082","title":"Microsoft Internet Explorer 7 (Windows 2003 SP2) - Memory Corruption (MS09-002)","type":"remote","platform":"windows","date":"2009-02-20","verified":true,"provenance":"source"},{"id":8152,"url":"https://www.exploit-db.com/exploits/8152","title":"Microsoft Internet Explorer 7 - Memory Corruption (MS09-002)","type":"remote","platform":"windows","date":"2009-03-04","verified":true,"provenance":"source"},{"id":16555,"url":"https://www.exploit-db.com/exploits/16555","title":"Microsoft Internet Explorer 7 - CFunctionPointer Uninitialized Memory Corruption (MS09-002) (Metasploit)","type":"remote","platform":"windows","date":"2010-07-12","verified":true,"provenance":"source"}],"exploitSources":{"exploitdb":{"count":6,"earliest":"2009-02-18"},"metasploit":[{"name":"MS09-002 Microsoft Internet Explorer 7 CFunctionPointer Uninitialized Memory Corruption","module":"exploit/windows/browser/ms09_002_memory_corruption","type":"exploit","disclosureDate":"2009-02-10","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms09_002_memory_corruption.rb"}],"first":{"date":"2009-02-10","source":"Metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms09_002_memory_corruption.rb"},"provenance":"source"},"exploitRefs":["https://www.exploit-db.com/exploits/8082","https://www.exploit-db.com/exploits/8079","https://www.exploit-db.com/exploits/8080","https://www.exploit-db.com/exploits/8077"],"flow":[{"stage":"exploitation","techniques":["T1189"],"provenance":"ai"},{"stage":"primary","techniques":["T1203"],"provenance":"ai"}],"timeline":[{"date":"2009-02-10","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2009-0075","provenance":"source"},{"date":"2009-02-10","kind":"exploit-public","label":"First public exploit: Metasploit; later: Exploit-DB 2009-02-18","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms09_002_memory_corruption.rb","provenance":"source"},{"date":"2010-05-01","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://www.virusbulletin.com/virusbulletin/2010/05/exploit-kit-explosion-part-two-vectors-attack/","provenance":"source"}],"speed":{"daysToPublicExploit":0,"firstExploitFrom":"Metasploit","daysToKev":null},"priority":{"score":64.9,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 6025 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.94,"detail":"percentile 0.9970"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":5.0,"detail":"4 NVD references tagged Exploit; 6 Exploit-DB entries; 1 Metasploit module"},{"name":"Mentioned in OTX pulses","points":1.08,"detail":"2 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"children":[{"from":"CVE-2009-0075","to":"CVE-2010-1176","relation":"related","confidence":"low","kind":"lineage","evidence":[{"kind":"text","provenance":"source","relation":"related","quote":"…crafted strings in their SRC attributes, a TBODY element with no associated TABLE element, and certain calls to the delete operator and the cloneNode, clearAttributes, and CollectGarbage methods, possibly a related issue to CVE-2009-0075.","from":"CVE.org","in":"CVE-2010-1176"}]}]}}