CVE-2009-2519

State: Published
Severity: Not scored
Published: Sep 8, 2009
Updated: Aug 7, 2024
Reserved: Jul 17, 2009

Description

The DHTML Editing Component ActiveX control in Microsoft Windows 2000 SP4, XP SP2 and SP3, and Server 2003 SP2 does not properly format HTML markup, which allows remote attackers to execute arbitrary code via a crafted web site that triggers "system state" corruption, aka "DHTML Editing Component ActiveX Control Vulnerability."

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

36280vdb-entry
MS09-046vendor-advisory
36592third-party-advisory
1022843vdb-entry
TA09-251Athird-party-advisory
oval:org.mitre.oval:def:6271vdb-entrysignature

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.