Description
Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479. NOTE: it was later reported that 7.0.6000.16473 and earlier are also affected.
References
- http://websecurity.com.ua/3338/
- 20090725 DoS vulnerabilities in Internet Explorer mailing-list
- 20090725 Re: DoS vulnerabilities in Firefox, Internet Explorer, Opera and Chrome mailing-list
- 20090720 RE: DoS vulnerabilities in Firefox, Internet Explorer, Opera and Chrome mailing-list
- 20090719 DoS vulnerabilities in Firefox, Internet Explorer, Opera and Chrome mailing-list
- 20090720 Re: DoS vulnerabilities in Firefox, Internet Explorer, Opera and Chrome mailing-list