CVE-2009-3019

medium · 5

Microsoft Internet Explorer 6 on Windows XP SP2 and SP3, and Internet Explorer 7 on Vista, allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls createElement to create an instance of the LI element, and then calls setAttribute to set the value attribute.

CVSS

17.4%

EPSS (exploit prob.)

97th

EPSS percentile

2009-08-31

Published

AV:N/AC:L/Au:N/C:N/I:N/A:P

Weaknesses

CWE-94

Affected products

Vendor	Product	Affected versions
microsoft	internet_explorer	6
microsoft	windows_xp	all versions
microsoft	windows_xp	all versions
microsoft	internet_explorer	7
microsoft	windows_vista	all versions

Check a specific version with /api/v1/cve/match.

References

http://www.exploit-db.com/exploits/9455
http://www.exploit-db.com/exploits/9455

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2009-3019