Vulnerabilities

Microsoft Internet Explorer 5 through 8 DDOS vulnerability (PC1-2009-1843)

Vulnerability chart	Risk level Low Medium High Extreme Severe Warning: security vulnerability level = severe 66 vulnerabilities(-y) found between 12 December, 2008 and 30 March, 2010. Windows Internet Explorer 8 (known as IE8) is the current web browser which... more See also: Microsoft Internet Explorer 8 Vulnerability has been found in Microsoft Internet Explorer 5 through 8.
DDOS Unknown patch availability Patch implementation unknown

Description:	By using a vulnerability in Microsoft Internet Explorer 5 through 8 malicious people are enabled to cause a denial of service that is memory consumption and application crash. This damage might be done through a large integer value for the length property of a Select object, an associated issue with CVE-2009-1692.
Impact:	With the help of this particular vulnerability, remote attackers are enabled to break up a service.
References:	http://www.securityfocus.com/archive/1/archive/1/505006/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/504989/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/504988/100/0/threaded http://www.securityfocus.com/archive/1/archive/1/504969/100/0/threaded http://www.milw0rm.com/exploits/9160 http://www.g-sec.lu/one-bug-to-rule-them-all.html

CVSS Severity		CVSS Version 2 Metrics:
CVSS v2 Base Score:	4.3 (MEDIUM)	Access Vector:	N/A
Impact Subscore:	2.9	Access Complexity:	Medium
Exploitability Subscore:	8.6	Authentication:	Not required to exploit
		Impact Type:	Allows disruption of serviceUnknown