CVE-2008-1086

CVE-2008-1086 describes a critical remote code execution vulnerability in the HxTocCtrl ActiveX control (hxvz.dll), affecting Microsoft Internet Explorer 5.01 SP4 and 6 SP1, as well as various Windows operating systems including XP SP2, Server 2003 SP1/SP2, Vista SP1, and Server 2008. This flaw allows attackers to execute arbitrary code by supplying malformed arguments, leading to memory corruption. With a CVSS score of 9.3 (Critical) and a FAUCET Risk Score of 98/100, this vulnerability presents a significant risk due to its network-based attack vector, medium complexity, and complete compromise of confidentiality, integrity, and availability. Despite its high severity and EPSS score indicating a higher likelihood of exploitation compared to most CVEs, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.