CVE		CVE-2008-3476
Status		Candidate
Description		Microsoft Internet Explorer 5.01 SP4 and 6 does not properly handle errors associated with access to uninitialized memory, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "HTML Objects Memory Corruption Vulnerability."
Severity		High
CVSS score		9,3
CVSS vector		(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Phase		Assigned (26.01.2012)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3476
References		BID : 31618
		CERT : TA08-288A
		HP : HPSBST02379
		HP : SSRT080143
		MS : MS08-058
		SECTRACK : 1021047
		VUPEN : ADV-2008-2809
		XF : ie-unit-memory-code-execution(45564)
		XF : win-ms08kb956390-update(45565)
SecurityVulns:		Microsoft Internet Explorer multiple security vulnerabilities