CVE-2008-0077
Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote...
Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote attackers to execute arbitrary code by assigning malformed values to certain properties, as demonstrated using the by property of an animateMotion SVG element, aka "Property Memory Corruption Vulnerability."
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote attackers to execute arbitrary code by assigning malformed values to certain properties, as demonstrated using the by property of an animateMotion SVG element, aka "Property Memory Corruption Vulnerability."
- Record
CVE-2008-0077- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Weakness
- CWE-416
- Updated
- 2026-11-02
CVE List No score
Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote attackers to execute arbitrary code by assigning malformed values to certain properties, as demonstrated using the by property of an animateMotion SVG element, aka "Property Memory Corruption Vulnerability."
- Record
CVE-2008-0077- Updated
- 2026-11-02
EUVDEUVD-2008-0090 No score
Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote attackers to execute arbitrary code by assigning malformed values to certain properties, as demonstrated using the by property of an animateMotion SVG element, aka "Property Memory Corruption Vulnerability."
- Record
EUVD-2008-0090- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-mf54-6363-29h5
Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote...
Use-after-free vulnerability in Microsoft Internet Explorer 6 SP1, 6 SP2, and and 7 allows remote attackers to execute arbitrary code by assigning malformed values to certain properties, as demonstrated using the by property of an animateMotion SVG element, aka "Property Memory Corruption Vulnerability."
- Record
GHSA-mf54-6363-29h5- CVSS 3.1
- 8.8 High
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H - Weakness
- CWE-416
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-0077 is a high vulnerability (CVSS 8.8) in Microsoft Internet Explorer, published February 12, 2008. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 37.2%, the 98th percentile. No source names a fixed version.
References
securityfocus.com/archive/1/488048/100/0/threaded
marc.info?l=bugtraq&m=120361015026386&w=2
kb.cert.org/vuls/id/228569
zerodayinitiative.com/advisories/ZDI-08-006.html
securitytracker.com/id?1019380
Show 8 moreShow less
us-cert.gov/cas/techalerts/TA08-043C.html
labs.idefense.com/intelligence/vulnerabilities/display.php?id=661
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5396
vupen.com/english/advisories/2008/0512/references
docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-010
secunia.com/advisories/28903
nvd.nist.gov/vuln/detail/CVE-2008-0077
github.com/advisories/GHSA-mf54-6363-29h5