CVE-2009-2576

medium · 5

Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479. NOTE: it was later reported that 7.0.6000.16473 and earlier are also affected.

CVSS

14.9%

EPSS (exploit prob.)

97th

EPSS percentile

2009-07-22

Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE-399

Affected products

Vendor	Product	Affected versions
microsoft	ie	all versions
microsoft	ie	all versions
microsoft	ie	2.0
microsoft	ie	2.0_beta
microsoft	ie	3.0
microsoft	ie	3.0
microsoft	ie	3.0.1
microsoft	ie	3.01
microsoft	ie	3.1
microsoft	ie	4.0
microsoft	ie	4.0
microsoft	ie	4.0
microsoft	ie	4.0
microsoft	ie	4.0
microsoft	ie	4.0.1
microsoft	ie	4.0.1
microsoft	ie	4.0.1
microsoft	ie	4.0.1
microsoft	ie	4.0a
microsoft	ie	4.1
microsoft	ie	4.1
microsoft	ie	4.1
microsoft	ie	4.5
microsoft	ie	4.5
microsoft	ie	4.x
microsoft	ie	5
microsoft	ie	5.0
microsoft	ie	5.0
microsoft	ie	5.0
microsoft	ie	5.0
microsoft	ie	5.0
microsoft	ie	5.0
microsoft	ie	5.0
microsoft	ie	5.0
microsoft	ie	5.0
microsoft	ie	5.0.1
microsoft	ie	5.0.1
microsoft	ie	5.0.1
microsoft	ie	5.0.1
microsoft	ie	5.0_ta3

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-2576