{"vulnerability": "CVE-2008-4844", "sightings": [{"uuid": "64b2b0fd-b635-4988-9de3-47385d1a3c6e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-4844", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-06T03:13:39.000000Z"}, {"uuid": "0a07251e-dba7-4b71-aefc-e9c72f760566", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-4844", "type": "seen", "source": "MISP/a1e796df-2ad8-4c8d-8b69-737a004e72dd", "content": "", "creation_timestamp": "2025-02-23T04:08:33.000000Z"}, {"uuid": "44f4c166-60c2-419e-b1a8-ab50187151ff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-4844", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms08_078_xml_corruption.rb", "content": "", "creation_timestamp": "2018-05-29T15:50:33.000000Z"}, {"uuid": "a9018315-7e68-4e8b-99b6-581b0452439d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2008-4844", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/7403", "content": "", "creation_timestamp": "2008-12-10T00:00:00.000000Z"}, {"uuid": "86e1f343-f47c-4455-b4b6-4a6f75568402", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2008-4844", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/7410", "content": "", "creation_timestamp": "2008-12-10T00:00:00.000000Z"}, {"uuid": "5b1c2835-2cd9-45b7-88f9-ce4d4e0ba129", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "db99543d-496c-4eef-ad0a-2df2093364df", "vulnerability": "CVE-2008-4844", "type": "confirmed", "source": "https://www.exploit-db.com/exploits/16583", "content": "", "creation_timestamp": "2010-09-20T00:00:00.000000Z"}, {"uuid": "26e2a6b8-33aa-4a7f-a64d-f5ce2e17cf44", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-4844", "type": "seen", "source": "https://t.me/arpsyndicate/1639", "content": "#ExploitObserverAlert\n\nCVE-2008-4844\n\nDESCRIPTION: Exploit Observer has 22 entries related to CVE-2008-4844. Use-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll in Microsoft Internet Explorer 5.01, 6, 6 SP1, and 7 allows remote attackers to execute arbitrary code via DSO bindings involving (1) an XML Island, (2) XML DSOs, or (3) Tabular Data Control (TDC) in a crafted HTML or XML document, as demonstrated by nested SPAN or MARQUEE elements, and exploited in the wild in December 2008.\n\nFIRST-EPSS: 0.972770000\nNVD-IS: 10.0\nNVD-ES: 8.6", "creation_timestamp": "2023-12-10T14:49:53.000000Z"}, {"uuid": "b368b892-342f-4260-a130-be8cef778e09", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-4844", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/23140cf3-43ef-4e53-b761-14a00cf0a6a4", "content": "", "creation_timestamp": "2026-06-19T16:45:41.575704Z"}, {"uuid": "5f978db5-8ec7-4578-a06d-d37134781222", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-4844", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/60baf695-af21-45c5-a134-61ac7bc81627", "content": "", "creation_timestamp": "2026-06-23T14:04:17.011331Z"}, {"uuid": "93b4e7d4-91a9-41fa-8702-5c421798180d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2008-4844", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/browser/ms08_078_xml_corruption.rb", "content": "{\"aliases\": [], \"arch\": \"\", \"author\": [\"hdm \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This module exploits a vulnerability in the data binding feature of Internet\\n          Explorer. In order to execute code reliably, this module uses the .NET DLL\\n          memory technique pioneered by Alexander Sotirov and Mark Dowd. This method is\\n          used to create a fake vtable at a known location with all methods pointing\\n          to our payload. Since the .text segment of the .NET DLL is non-writable, a\\n          prefixed code stub is used to copy the payload into a new memory segment and\\n          continue execution from there.\", \"disclosure_date\": \"2008-12-07\", \"fullname\": \"exploit/windows/browser/ms08_078_xml_corruption\", \"is_install_path\": true, \"mod_time\": \"2025-06-23 12:43:46 +0000\", \"name\": \"MS08-078 Microsoft Internet Explorer Data Binding Memory Corruption\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/windows/browser/ms08_078_xml_corruption.rb\", \"platform\": \"Windows\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"windows/browser/ms08_078_xml_corruption\", \"references\": [\"CVE-2008-4844\", \"OSVDB-50622\", \"BID-32721\", \"MSB-MS08-078\", \"URL-https://web.archive.org/web/20080913064223/http://taossa.com/archive/bh08sotirovdowd.pdf\"], \"rport\": null, \"session_types\": false, \"targets\": [\"Automatic\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:51:08.311005Z"}]}