CVE-2008-4299

2008-09-2917:00:00

mitre

www.cve.org

6.6 Medium

AI Score

Confidence

High

0.049 Low

EPSS

Percentile

92.8%

JSON

A certain ActiveX control in the Microsoft Internet Authentication Service (IAS) Helper COM Component in iashlpr.dll allows remote attackers to cause a denial of service (browser crash) via a large integer value in the first argument to the PutProperty method. NOTE: this issue was disclosed by an unreliable researcher, so it might be incorrect.