CVE-2009-0072

MEDIUM 4.3CVE-2009-0072 · Published 08/01/2009 · updated 16/06/2026

In short

CVE-2009-0072 is a MEDIUM (CVSS 4.3) vulnerability affecting internet explorer (microsoft).
Chance of exploitation in the next 30 days (EPSS): 9.4%, higher than 95.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
internet explorer microsoft	`= 6= 7= 8`	No fix yet

Description

Microsoft Internet Explorer 6.0 through 8.0 beta2 allows remote attackers to cause a denial of service (application crash) via an onload=screen[""] attribute value in a BODY element.

References

skypher.com/index.php/2009/01/07/msie-screen-null-ptr-dos-details · URL Repurposed
securityfocus.com/bid/33149 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/47788

More vulnerabilities in internet explorer

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free