Remote code execution in Microsoft Internet Explorer 6, 7, and 8 allows attackers to execute arbitrary code through use-after-free or uninitialized memory corruption in the HTML+TIME (Timed Interactive Multimedia Extensions) engine. With an EPSS score of 52.37% (98th percentile) and publicly available exploit code, this represents a high-probability exploitation risk despite requiring user interaction to visit a malicious webpage. Microsoft released patch MS11-050 in June 2011, and the vendor specifically noted that IE9 was not affected by this implementation flaw.
Buffer Overflow
Microsoft
RCE
NVD
Exploit-DB
CVSS 2.0
9.3
EPSS
52.4%
Threat
6.9