CVE-2009-2576: Medium severity microsoft internet explorer vulnerability
Published Jul 22, 2009
·Updated
Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479. NOTE: it was later reported that 7.0.6000.16473 and earlier are also affected.
Affected Software
127 affected components
Microsoft ie=5.0
Microsoft ie=5.0
Microsoft ie=5.2.3
Microsoft ie=4.0
Microsoft ie=5.0.1
Microsoft ie=6
Microsoft ie=5.1
Microsoft ie=3.0
Microsoft ie
Microsoft ie=5.0
Microsoft ie=5.22
Microsoft Internet Explorer=5
Microsoft ie=4.x
Microsoft ie=4.0.1
Microsoft ie=5.0
Microsoft Internet Explorer=6-sp1
Microsoft ie=6-sp1
Microsoft ie=5.0_ta3
Microsoft ie=4.0.1
Microsoft Internet Explorer<=6.0.2900.2180
Microsoft ie=6
Microsoft ie=4.5
Microsoft ie=4.5
Microsoft ie=5.1.1
Microsoft ie=2.0
Microsoft ie=4.0
Microsoft ie=2.0_beta
Microsoft ie=6-sp1
Microsoft ie=4.0.1
Microsoft ie=6-sp1
Microsoft ie=5.0.1
Microsoft ie=3.1
Microsoft ie
Microsoft ie=5.x
Microsoft ie=5.0.1
Microsoft ie=5.0.1
Microsoft ie=5.0
Microsoft ie=4.0a
Microsoft ie=5.0-sp4
Microsoft ie=4.1
Microsoft ie=5.2.3
Microsoft ie=6
Microsoft ie=5.0-sp1
Microsoft ie=5.01
Microsoft ie=3.01
Microsoft ie=4.0
Microsoft ie=5.0
Microsoft ie=4.0
Microsoft ie=5.1
Microsoft ie=4.1
Microsoft ie=5
Microsoft Internet Explorer=6
Microsoft ie=5.1.7
Microsoft ie=6-sp1
Microsoft ie=5.2
Microsoft ie=5.0
Microsoft Internet Explorer=5.01
Microsoft ie=4.0-a
Microsoft ie=4.0.1
Microsoft ie=3.0.1
Microsoft ie=6-sp1
Microsoft ie=6
Microsoft ie=3.0
Microsoft ie=4.1
Microsoft Internet Explorer=5.01-sp3
Microsoft Internet Explorer=5.5-sp2
Microsoft Internet Explorer=3.0.1
Microsoft Internet Explorer=3.0.2
Microsoft Internet Explorer=3.0
Microsoft Internet Explorer=3.1
Microsoft Internet Explorer=3.2
Microsoft Internet Explorer=4.0
Microsoft Internet Explorer=4.0.1
Microsoft Internet Explorer=4.0.1-sp2
Microsoft Internet Explorer=4.0.1-sp1
Microsoft Internet Explorer=4.01
Microsoft Internet Explorer=4.01-sp1
Microsoft Internet Explorer=4.1
Microsoft Internet Explorer=4.5
Microsoft Internet Explorer=4.40.308
Microsoft Internet Explorer=4.40.520
Microsoft Internet Explorer=4.70.1155
Microsoft Internet Explorer=4.70.1158
Microsoft Internet Explorer=4.70.1215
Microsoft Internet Explorer=4.70.1300
Microsoft Internet Explorer=4.72.3612.1713
Microsoft Internet Explorer=4.71.1008.3
Microsoft Internet Explorer=4.71.1712.6
Microsoft Internet Explorer=4.72.2106.8
Microsoft Internet Explorer=4.72.3110.8
Microsoft Internet Explorer=5.0
Microsoft Internet Explorer=5.0.1
Microsoft Internet Explorer=5.0.1-sp2
Microsoft Internet Explorer=5.0.1-sp4
Microsoft Internet Explorer=5.0.1-sp1
Microsoft Internet Explorer=5.00.0518.10
Microsoft Internet Explorer=5.00.0910.1309
Microsoft Internet Explorer=5.00.2014.0216
Microsoft Internet Explorer=5.00.2614.3500
Microsoft Internet Explorer=5.00.2516.1900
Microsoft Internet Explorer=5.00.2919.800
Microsoft Internet Explorer=5.00.2919.6307
Microsoft Internet Explorer=5.00.2920.0000
Microsoft Internet Explorer=5.00.3103.1000
Microsoft Internet Explorer=5.00.3105.0106
Microsoft Internet Explorer=5.00.3314.2101
Microsoft Internet Explorer=5.00.3315.1000
Microsoft Internet Explorer=5.00.3502.1000
Microsoft Internet Explorer=5.00.3700.1000
Microsoft Internet Explorer=5.50.3825.1300
Microsoft Internet Explorer=5.50.4030.2400
Microsoft Internet Explorer=5.50.4134.0100
Microsoft Internet Explorer=5.50.4134.0600
Microsoft Internet Explorer=5.50.4308.2900
Microsoft Internet Explorer=5.50.4522.1800
Microsoft Internet Explorer=5.50.4807.2300
Microsoft Internet Explorer=5.5
Microsoft Internet Explorer=5.01-sp1
Microsoft Internet Explorer=5.1
Microsoft Internet Explorer=5.2.3
Microsoft Internet Explorer=5.5-preview
Microsoft Internet Explorer=5.5-sp1
Microsoft Internet Explorer=6.0.2600
Microsoft Internet Explorer=6.0
Microsoft Internet Explorer=6.0.2800
Microsoft Internet Explorer=6.0.2800.1106
Microsoft Internet Explorer=6.0.2900
Event History
Jul 22, 2009
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2009-2576?
CVE-2009-2576 is classified as a denial of service vulnerability affecting Microsoft Internet Explorer.
2
How do I fix CVE-2009-2576?
To fix CVE-2009-2576, users should update to the latest version of Microsoft Internet Explorer available at the time.
3
What versions of Internet Explorer are affected by CVE-2009-2576?
CVE-2009-2576 affects Microsoft Internet Explorer versions 6.0.2900.2180 and earlier, as well as certain earlier versions of Internet Explorer 7.
4
What is the attack vector for CVE-2009-2576?
The attack vector for CVE-2009-2576 involves sending a long Unicode string argument to the write method, leading to denial of service.
5
Is there a workaround for CVE-2009-2576?
A workaround for CVE-2009-2576 is to avoid using Microsoft Internet Explorer versions known to be affected until an update is applied.