CVE ID:	CVE-2008-3475
Description:	Microsoft Internet Explorer 6 does not properly handle errors related to using the componentFromPoint method on xml objects that have been (1) incorrectly initialized or (2) deleted, which allows remote attackers to execute arbitrary code via a crafted HTML document, aka "Uninitialized Memory Corruption Vulnerability."
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2008-3475 BugTraq ID: 31617 http://www.securityfocus.com/bid/31617 Bugtraq: 20081015 Internet Explorer 6 componentFromPoint() remote memory disclosure and remote code execution (Google Search) http://www.securityfocus.com/archive/1/497380/100/0/threaded Cert/CC Advisory: TA08-288A http://www.us-cert.gov/cas/techalerts/TA08-288A.html HPdes Security Advisory: HPSBST02379 http://marc.info/?l=bugtraq&m=122479227205998&w=2 HPdes Security Advisory: SSRT080143 http://marc.info/?l=bugtraq&m=122479227205998&w=2 http://ifsec.blogspot.com/2008/10/internet-explorer-6-componentfrompoint.html http://www.zerodayinitiative.com/advisories/ZDI-08-069/ Microsoft Security Bulletin: MS08-058 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-058 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13151 http://www.securitytracker.com/id?1021047 http://www.vupen.com/english/advisories/2008/2809 XForce ISS Database: ie-uninitialized-objects-code-execution(45563) https://exchange.xforce.ibmcloud.com/vulnerabilities/45563 XForce ISS Database: win-ms08kb956390-update(45565) https://exchange.xforce.ibmcloud.com/vulnerabilities/45565