CVE-2009-2764 - Microsoft Internet Explorer 8.0.7100.0 on Windows 7 RC on the x64 platform allows remote attackers t

CVE-2009-2764

Summary

Microsoft Internet Explorer 8.0.7100.0 on Windows 7 RC on the x64 platform allows remote attackers to cause a denial of service (application crash) via a certain DIV element in conjunction with SCRIPT elements that have empty contents and no reference to a valid external script location.

References

http://www.exploit-db.com/exploits/9362
http://www.securityfocus.com/bid/35941

Vulnerable Configurations

cpe:2.3:a:microsoft:internet_explorer:8.0.7100.0:*:*:*:*:*:*:*
cpe:2.3:a:microsoft:internet_explorer:8.0.7100.0:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*

CVSS

Base:	5.0 (as of 30-10-2018 - 16:27)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
NONE	NONE	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:N/I:N/A:P

refmap via4

bid	35941
exploit-db	9362

Last major update

30-10-2018 - 16:27

Published

14-08-2009 - 15:16

Last modified

30-10-2018 - 16:27