VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 8, 2009· Updated Jun 16, 2026

CVE-2009-0072

CVE-2009-0072

Description

Microsoft Internet Explorer 6.0 through 8.0 beta2 allows remote attackers to cause a denial of service (application crash) via an onload=screen[""] attribute value in a BODY element.

Affected products

7
  • Microsoft/Internet Explorer7 versions
    cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:6:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:6:sp2:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:8:beta1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:internet_explorer:8:beta2:*:*:*:*:*:*
    • (no CPE)range: 6.0 - 8.0 beta2

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.