CVE-2009-1528

N/A

Published: June 10, 2009 at 06:00 PM UTC

Updated: June 16, 2026 at 11:07 PM UTC

5 products affected across 1 vendorInternet ExplorerWindows Server 2008Windows Xp

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

N/A

Exploit prediction

EPSS 35%

Description

Microsoft Internet Explorer 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not properly synchronize AJAX requests, which allows allows remote attackers to execute arbitrary code via a large number of concurrent, asynchronous XMLHttpRequest calls, aka "HTML Object Memory Corruption Vulnerability."

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

Internet Explorer · Microsoft

95%

6 7

microsoft-windows-server-2003 (environment) · microsoft-windows-server-2008 (environment) · microsoft-windows-vista (environment) · microsoft-windows-xp (environment)

Windows Server 2003 · Microsoftdevice

80%

All versions

Windows Server 2008 · Microsoftdevice

80%

All versions

Windows Vista · Microsoftdevice

80%

All versions

Windows Xp · Microsoftdevice

80%

All versions