Denial of Service Vulnerability in Microsoft Internet Explorer

CVE-2009-2576

Summary

Microsoft Internet Explorer versions 6.0.2900.2180 and earlier, as well as versions 7.0.6000.16473 and earlier, are susceptible to a denial of service attack. This vulnerability arises when specifically crafted long Unicode string arguments are passed to the write method, leading to excessive CPU and memory consumption. Attackers can exploit this weakness to disrupt user access and cripple browser functionality, creating significant usability issues.

References