CVE-2008-5750

Microsoft Internet Explorer 8 beta 2 - Command Injection

Title source: llm

Description

Argument injection vulnerability in Microsoft Internet Explorer 8 beta 2 on Windows XP SP3 allows remote attackers to execute arbitrary commands via the --renderer-path option in a chromehtml: URI.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Nine:Situations:Group · htmlremotewindows

https://www.exploit-db.com/exploits/7566

View Code ZIP pw:eip

References (5)

[Exploit] http://retrogod.altervista.org/9sg_chrome.html

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/7566

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/32999

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/499570/100/0/threaded

[Third Party Advisory] http://securityreason.com/securityalert/4821

Scores

EPSS 0.1823

EPSS Percentile 95.2%

Details

CWE

CWE-94

Status published

Products (1)

microsoft/internet_explorer 8 beta2

Published Dec 29, 2008

Tracked Since Feb 18, 2026