Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (application crash) via Javascript that calls the alert function with a URL-encoded string of a large number of invalid characters.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Internet_explorer | Microsoft | 5 (including) | 5 (including) |
| Internet_explorer | Microsoft | 6 (including) | 6 (including) |
| Internet_explorer | Microsoft | 7 (including) | 7 (including) |