CVE-2009-3943

Опубликовано: 16 нояб. 2009

Источник: nvd

CVSS2: 5

EPSS Средний

Описание

Microsoft Internet Explorer 6 through 6.0.2900.2180 and 7 through 7.0.6000.16711 allows remote attackers to cause a denial of service (application hang) via a JavaScript loop that configures the home page by using the setHomePage method and a DHTML behavior property.

Ссылки

http://websecurity.com.ua/3658/
Exploit
Third Party Advisory
http://www.securityfocus.com/archive/1/507731/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/507760/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://websecurity.com.ua/3658/
Exploit
Third Party Advisory
http://www.securityfocus.com/archive/1/507731/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/507760/100/0/threaded
Broken Link
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*

Версия от 6 (включая) до 6.0.2900.2180 (включая)

Конфигурация 2

cpe:2.3:a:microsoft:internet_explorer:*:*:*:*:*:*:*:*

Версия от 7.0 (включая) до 7.0.6000.16711 (включая)

EPSS

Процентиль: 93%

0.11584

Средний

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-vhjx-q9cm-jppr

github

почти 4 года назад