CVE-2008-4381 — Microsoft Internet Explorer vulnerability

CWE-3992 documents2 sources

Severity

5.0MEDIUMNVD

EPSS

30.1%

top 3.32%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Microsoft Internet Explorer

Timeline

PublishedOct 2

Latest updateMay 2

Description

Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (application crash) via Javascript that calls the alert function with a URL-encoded string of a large number of invalid characters.

CVSS vector

AV:N/AC:L/C:N/I:N/A:PExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDmicrosoft/internet_explorer5, 6, 7+2

🔴Vulnerability Details

GHSA

GHSA-p2gw-r2j8-v884: Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (application crash) via Javascript that calls the alert function wi↗2022-05-02

▶