medium4.3Public exploit code
CVE-2009-2433
Stack-based buffer overflow in the AddFavorite method in Microsoft Internet Explorer allows remote attackers to cause a denial of service (application crash) a…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer - 'AddFavorite' Remote Crash (PoC)2009-07-09 · dos · windows · Verified
Impact
Stack-based buffer overflow in the AddFavorite method in Microsoft Internet Explorer allows remote attackers to cause a denial of service (application crash) and possibly have unspecified other impact via a long URL in the first argument.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Ie | Version 8.0b |
| Microsoft | Internet Explorer | Versions 7, 7.0, 7.0.5730, 7.0.5730.11, 7.00.5730.1100, 7.00.6000.16386 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/9100
- http://www.securityfocus.com/bid/35620
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12829
- http://www.exploit-db.com/exploits/9100
- http://www.securityfocus.com/bid/35620
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12829