CVE-2009-0072

Published: Jan 8, 2009Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Microsoft Internet Explorer 6.0 through 8.0 beta2 allows remote attackers to cause a denial of service (application crash) via an onload=screen[""] attribute value in a BODY element.

Affected (6)

Products: Microsoft: Internet Explorer

Microsoft

1 product

Internet Explorer

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Microsoft Internet Explorer	Version 6
Microsoft Internet Explorer	Version 6 sp1
Microsoft Internet Explorer	Version 6 sp2
Microsoft Internet Explorer	Version 7
Microsoft Internet Explorer	Version 8 beta1
Microsoft Internet Explorer	Version 8 beta2