CVE-2009-3019

2009-08-3116:00:00

mitre

www.cve.org

AI Score

6.6

Confidence

High

EPSS

0.461

Percentile

97.5%

JSON

Microsoft Internet Explorer 6 on Windows XP SP2 and SP3, and Internet Explorer 7 on Vista, allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls createElement to create an instance of the LI element, and then calls setAttribute to set the value attribute.

References

www.exploit-db.com/exploits/9455