CVE:CVE-2008-1086
CNNVD:CNNVD-200804-107
Microsoft Internet Explorer（IE）是美国微软（Microsoft）公司的一款Windows操作系统附带的Web浏览器。
当在Microsoft Internet Explorer 5.01 SP4和6 SP1,Windows XP SP2,Server 2003 SP1 和SP2, Vista SP1, 以及Server 2008中使用时，HxTocCtrl ActiveX控件，远程攻击者借助畸形的自变量，执行任意代码。它会触发内存破坏。
solution:Upgrade microsoft internet_explorer to a higher version than 5.01:sp4,6:sp1,and avoid the version 5.01:sp4,6:sp1; Upgrade microsoft windows-nt to a higher version than 2008,and avoid the version 2008; Upgrade microsoft windows_2003_server to a higher version than *,*:sp1,*:sp2,and avoid the version *:sp1,*:sp2; Upgrade microsoft windows_vista to a higher version than *; Upgrade microsoft windows_xp to a higher version than *,*:sp2,and avoid the version *:sp2