medium4.3Public exploit code
CVE-2009-2655
mshtml.dll in Microsoft Internet Explorer 7 and 8 on Windows XP SP3 allows remote attackers to cause a denial of service (application crash) by calling the Jav…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer 7/8 - findText Unicode Parsing Crash2009-07-24 · dos · windows · Verified
Impact
mshtml.dll in Microsoft Internet Explorer 7 and 8 on Windows XP SP3 allows remote attackers to cause a denial of service (application crash) by calling the JavaScript findText method with a crafted Unicode string in the first argument, and only one additional argument, as demonstrated by a second argument of -1.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Internet Explorer | Versions 7, 8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploit-db.com/exploits/9253
- http://www.securityfocus.com/bid/35799
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52249
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12700
- http://www.exploit-db.com/exploits/9253
- http://www.securityfocus.com/bid/35799
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52249
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12700