DoS vulnerability in Internet Explorer

2009.11.18

Credit: MustLive

Risk: Medium

Local: No

Remote: Yes

CVE: CVE-2009-3943

CWE: CWE-Other

Ogólna skala CVSS: 5/10

Znaczenie: 2.9/10

Łatwość wykorzystania: 10/10

Wymagany dostęp: Zdalny

Złożoność ataku: Niska

Autoryzacja: Nie wymagana

Wpływ na poufność: Brak

Wpływ na integralność: Brak

Wpływ na dostępność: Częściowy

I want to warn you about Denial of Service vulnerability in Internet
Explorer. Yesterday I already informed Microsoft.

This attack I called DoS via homepage.

DoS:

http://websecurity.com.ua/uploads/2009/IE%20DoS%20Exploit10.html

With this exploit in IE6 the browser blocks, so it's become impossible to
use it and it's only possible to close it (via Task Manager).

With this exploit in IE7 the browser freezes after click on the link .

Vulnerable versions are Internet Explorer 6 (6.0.2900.2180), Internet 
Explorer 7 (7.0.6000.16711) and previous versions (and possible next 
versions too).

I mentioned about this vulnerability at my site
(http://websecurity.com.ua/3658/).

Best wishes & regards,
MustLive
Administrator of Websecurity web site
http://websecurity.com.ua

Referencje:

http://www.securityfocus.com/archive/1/archive/1/507760/100/0/threaded

http://www.securityfocus.com/archive/1/archive/1/507731/100/0/threaded

http://websecurity.com.ua/3658/

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

DoS vulnerability in Internet Explorer

Referencje:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.