CVE:CVE-2008-1085
CNNVD:CNNVD-200804-106
Microsoft Internet Explorer 5.01 SP4，6到SP1，以及7版本存在使用已释放数据(Use-after-free)漏洞。远程攻击者借助一个特制的数据流，执行任意代码。该数据流会触发内存破坏。比如使用一个不具有注册的处理程序的无效的MIME-type。
solution:Upgrade microsoft ie to a higher version than 5.01:windows_2000_sp4,6:windows_server_2003_sp1,6:windows_server_2003_sp1_itanium,6:windows_xp_sp2,7,7:windows_server_2003_sp1,7:windows_xp_sp2,and avoid the version 5.01:windows_2000_sp4,6:windows_server_2003_sp1,6:windows_server_2003_sp1_itanium,6:windows_xp_sp2,7,7:windows_server_2003_sp1,7:windows_xp_sp2; Upgrade microsoft internet_explorer to a higher version than 6,7,and avoid the version 6,7