Lucene search

K
cve[email protected]CVE-2009-0072
HistoryJan 08, 2009 - 7:30 p.m.

CVE-2009-0072

2009-01-0819:30:11
web.nvd.nist.gov
25
cve-2009-0072
microsoft
internet explorer
denial of service
application crash
remote attackers

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.5 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.7%

Microsoft Internet Explorer 6.0 through 8.0 beta2 allows remote attackers to cause a denial of service (application crash) via an onload=screen[β€œβ€] attribute value in a BODY element.

Affected configurations

NVD
Node
microsoftinternet_explorerMatch6
OR
microsoftinternet_explorerMatch6sp1
OR
microsoftinternet_explorerMatch6sp2
OR
microsoftinternet_explorerMatch7
OR
microsoftinternet_explorerMatch8beta1
OR
microsoftinternet_explorerMatch8beta2

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

6.5 Medium

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.7%