Summary
This host is installed with Internet Explorer and is prone to Denial of Service Vulnerability.
Impact
Successful exploitation will let the attacker craft the non-printable characters inside a web page and can trick the user to visit the crafted web page which will freeze the browser by making the application inactive.
Impact Level: Application
Solution
No solution or patch was made available for at least one year since disclosure of this vulnerability. Likely none will be provided anymore. General solution options are to upgrade to a newer release, disable respective features, remove the product or replace the product by another one For updates refer to http://www.microsoft.com/windows/downloads/ie/getitnow.mspx
Insight
This flaw might be due to displaying the unprintable characters in Win XP or Vista inside Internet Explorer Browser.
Affected
Microsoft Internet Explorer version 7.x and 8.x
References
Updated on 2015-03-25
Severity
Classification
-
CVE CVE-2009-1335 -
CVSS Base Score: 4.3
AV:N/AC:M/Au:N/C:N/I:N/A:P
Related Vulnerabilities
- Apple Safari Nested 'object' Tag Remote Denial Of Service vulnerability
- Cogent DataHub Integer Overflow Vulnerability
- Adobe Flash Media Server XML Data Remote Denial of Service Vulnerability
- FreeSWITCH 'switch_regex.c' Multiple Buffer Overflow Vulnerabilities
- Django Forms Library Algorithmic Complexity Vulnerability