Lucene search

K
cve[email protected]CVE-2009-0341
HistoryJan 29, 2009 - 7:30 p.m.

CVE-2009-0341

2009-01-2919:30:00
CWE-119
web.nvd.nist.gov
44
cve-2009-0341
microsoft
internet explorer 7.0
windows xp sp3
remote code execution
stack consumption vulnerability

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.21 Low

EPSS

Percentile

96.4%

The shell32 module in Microsoft Internet Explorer 7.0 on Windows XP SP3 might allow remote attackers to execute arbitrary code via a long VALUE attribute in an INPUT element, possibly related to a stack consumption vulnerability.

Affected configurations

NVD
Node
microsoftwindows_xpsp3
AND
microsoftinternet_explorerMatch7

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

AI Score

Confidence

Low

0.21 Low

EPSS

Percentile

96.4%

Related for CVE-2009-0341