NetSight
IP …
medium5.0

CVE-2009-2576

Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a long Unicode stri…

Impact

Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479. NOTE: it was later reported that 7.0.6000.16473 and earlier are also affected.

Affected products

VendorProductAffected versions
MicrosoftIe
All versions
Versions 2.0, 2.0_beta, 3.0, 3.0.1, 3.01
MicrosoftInternet Explorer
through 6.0.2900.2180
Versions 3.0, 3.0.1, 3.0.2, 3.1, 3.2

Weakness classification

CWE-399

References