CVE-2008-4127
medium · 4.3Mshtml.dll in Microsoft Internet Explorer 7 Gold 7.0.5730 and 8 Beta 8.0.6001 on Windows XP SP2 allows remote attackers to cause a denial of service (failure of subsequent image rendering) via a crafted PNG file, related to an infinite loop in the CDwnTaskExec::ThreadExec function.
4.3
CVSS
16.4%
EPSS (exploit prob.)
97th
EPSS percentile
2008-09-18
Published
AV:N/AC:M/Au:N/C:N/I:N/A:P
Weaknesses
CWE-399
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| microsoft | internet_explorer | 7.0.5730 |
| microsoft | internet_explorer | 8.0.6001 |
| microsoft | windows_xp | all versions |
Check a specific version with /api/v1/cve/match.
References
- http://securityreason.com/securityalert/4273
- http://www.securityfocus.com/archive/1/496483/100/0/threaded
- http://www.securityfocus.com/bid/31215
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45225
- http://securityreason.com/securityalert/4273
- http://www.securityfocus.com/archive/1/496483/100/0/threaded
- http://www.securityfocus.com/bid/31215
- https://exchange.xforce.ibmcloud.com/vulnerabilities/45225
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2008-4127