1. Home
  2. CVE Database
  3. CVE-2009-3019
MEDIUM · 5.0

CVE-2009-3019

Microsoft Internet Explorer 6 on Windows XP SP2 and SP3, and Internet Explorer 7 on Vista, allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls creat...

Vulnerability Description

Microsoft Internet Explorer 6 on Windows XP SP2 and SP3, and Internet Explorer 7 on Vista, allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls createElement to create an instance of the LI element, and then calls setAttribute to set the value attribute.

CVSS Score

5.0

MEDIUM

AV:N/AC:L/Au:N/C:N/I:N/A:P
Confidentiality
NONE
Integrity
NONE
Availability
PARTIAL

Affected Products

VendorProductVersions
MicrosoftInternet Explorer6
MicrosoftWindows XpAll versions
MicrosoftWindows VistaAll versions

Related Weaknesses (CWE)

CWE-94

References

FAQ

What is CVE-2009-3019?

CVE-2009-3019 is a vulnerability with a CVSS score of 5.0 (MEDIUM). Microsoft Internet Explorer 6 on Windows XP SP2 and SP3, and Internet Explorer 7 on Vista, allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls creat...

How severe is CVE-2009-3019?

CVE-2009-3019 has been rated MEDIUM with a CVSS base score of 5.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2009-3019?

Check the references section above for vendor advisories and patch information. Affected products include: Microsoft Internet Explorer, Microsoft Windows Xp, Microsoft Windows Vista.