CVE-2009-0072: Medium severity Microsoft Internet Explorer vulnerability
Published Jan 8, 2009
·Updated
Microsoft Internet Explorer 6.0 through 8.0 beta2 allows remote attackers to cause a denial of service (application crash) via an onload=screen[""] attribute value in a BODY element.
Affected Software
6 affected components
Microsoft Internet Explorer=6
Microsoft Internet Explorer=6-sp1
Microsoft Internet Explorer=6-sp2
Microsoft Internet Explorer=7
Microsoft Internet Explorer=8-beta1
Microsoft Internet Explorer=8-beta2
Event History
Jan 8, 2009
CVE Published
via MITRE·07:00 PM
Data Sourced
via MITRE·07:00 PM
Description
Data Sourced
via NVD·07:30 PM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-0072?
CVE-2009-0072 is classified as a denial of service vulnerability that can lead to application crashes.
2
What versions of Internet Explorer are affected by CVE-2009-0072?
CVE-2009-0072 affects Microsoft Internet Explorer versions 6.0 through 8.0 beta2.
3
How can CVE-2009-0072 be exploited?
CVE-2009-0072 can be exploited by remote attackers through malicious usage of the onload attribute in a BODY element.
4
How do I fix CVE-2009-0072?
To fix CVE-2009-0072, users should upgrade to a non-vulnerable version of Internet Explorer.
5
Is there a workaround for CVE-2009-0072?
There are no specific workarounds for CVE-2009-0072; updating the browser is the recommended action.