Evil-DB LogoEvil-DB
← All CVEs

CVE-2009-0341

high · 9.3

The shell32 module in Microsoft Internet Explorer 7.0 on Windows XP SP3 might allow remote attackers to execute arbitrary code via a long VALUE attribute in an INPUT element, possibly related to a stack consumption vulnerability.

9.3
CVSS
16.0%
EPSS (exploit prob.)
97th
EPSS percentile
2009-01-29
Published

AV:N/AC:M/Au:N/C:C/I:C/A:C

Weaknesses

CWE-119

Affected products

VendorProductAffected versions
microsoftwindows_xpall versions
microsoftinternet_explorer7

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-0341