Unscored CVE-2008-4381 EUVD-2008-4362GHSA-p2gw-r2j8-v884

Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (application crash) via Javascript that calls the alert …

Published Oct 2, 2008 · Updated Aug 7, 2024 · Assigned by mitre

Description

Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (application crash) via Javascript that calls the alert function with a URL-encoded string of a large number of invalid characters.

References

ie-alert-function-dos(45639) vdb-entry
4345 third-party-advisory
[oss-security] 20081003 Re: regarding CVE-2008-4382 & CVE-2008-4381 mailing-list
20080929 MS Internet Explorer 7 Denial Of Service Exploit mailing-list
[oss-security] 20081003 regarding CVE-2008-4382 & CVE-2008-4381 mailing-list
20081001 Re: MS Internet Explorer 7 Denial Of Service Exploit mailing-list