CVE-2008-3475

8.8 highEPSS 40%

High (8.8) in microsoft internet explorer. EPSS 40% chance of exploitation in the next 30 days.

Microsoft Internet Explorer 6 does not properly handle errors related to using the componentFromPoint method on xml objects that have been (1) incorrectly initialized or (2) deleted, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "Uninitialized Memory Corruption Vulnerability."

Severity

CVSS 3.1

8.8 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 40% chance of exploitation in the next 30 days; higher than 98% of CVEs (scores of 2026-10-31)
CWE: CWE-908
Published: 2008-10-15
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

microsoft:internet_explorer

References

http://ifsec.blogspot.com/2008/10/internet-explorer-6-componentfrompoint.html
http://marc.info/?l=bugtraq&m=122479227205998&w=2
http://www.securityfocus.com/archive/1/497380/100/0/threaded
http://www.securityfocus.com/bid/31617
http://www.securitytracker.com/id?1021047

Check your stack JSON