Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service (CPU and memory consumption) via a long Unicode string argument to the write method, a related issue to CVE-2009-2479. NOTE: it was later reported that 7.0.6000.16473 and earlier are also affected.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ie | Microsoft | * | * |
| Ie | Microsoft | 2.0 (including) | 2.0 (including) |
| Ie | Microsoft | 2.0_beta (including) | 2.0_beta (including) |
| Ie | Microsoft | 3.0 (including) | 3.0 (including) |
| Ie | Microsoft | 3.0.1 (including) | 3.0.1 (including) |
| Ie | Microsoft | 3.01 (including) | 3.01 (including) |
| Ie | Microsoft | 3.1 (including) | 3.1 (including) |
| Ie | Microsoft | 4.0 (including) | 4.0 (including) |
| Ie | Microsoft | 4.0-a (including) | 4.0-a (including) |
| Ie | Microsoft | 4.0.1 (including) | 4.0.1 (including) |
| Ie | Microsoft | 4.0a (including) | 4.0a (including) |
| Ie | Microsoft | 4.1 (including) | 4.1 (including) |
| Ie | Microsoft | 4.5 (including) | 4.5 (including) |
| Ie | Microsoft | 4.x (including) | 4.x (including) |
| Ie | Microsoft | 5 (including) | 5 (including) |
| Ie | Microsoft | 5.0 (including) | 5.0 (including) |
| Ie | Microsoft | 5.0-sp1 (including) | 5.0-sp1 (including) |
| Ie | Microsoft | 5.0-sp4 (including) | 5.0-sp4 (including) |
| Ie | Microsoft | 5.0.1 (including) | 5.0.1 (including) |
| Ie | Microsoft | 5.0_ta3 (including) | 5.0_ta3 (including) |
| Ie | Microsoft | 5.1 (including) | 5.1 (including) |
| Ie | Microsoft | 5.01 (including) | 5.01 (including) |
| Ie | Microsoft | 5.1.1 (including) | 5.1.1 (including) |
| Ie | Microsoft | 5.1.7 (including) | 5.1.7 (including) |
| Ie | Microsoft | 5.2 (including) | 5.2 (including) |
| Ie | Microsoft | 5.2.3 (including) | 5.2.3 (including) |
| Ie | Microsoft | 5.22 (including) | 5.22 (including) |
| Ie | Microsoft | 5.x (including) | 5.x (including) |
| Ie | Microsoft | 6 (including) | 6 (including) |
| Ie | Microsoft | 6-sp1 (including) | 6-sp1 (including) |
| Internet_explorer | Microsoft | * | 6.0.2900.2180 (including) |
| Internet_explorer | Microsoft | 3.0 (including) | 3.0 (including) |
| Internet_explorer | Microsoft | 3.0.1 (including) | 3.0.1 (including) |
| Internet_explorer | Microsoft | 3.0.2 (including) | 3.0.2 (including) |
| Internet_explorer | Microsoft | 3.1 (including) | 3.1 (including) |
| Internet_explorer | Microsoft | 3.2 (including) | 3.2 (including) |
| Internet_explorer | Microsoft | 4.0 (including) | 4.0 (including) |
| Internet_explorer | Microsoft | 4.0.1 (including) | 4.0.1 (including) |
| Internet_explorer | Microsoft | 4.0.1-sp1 (including) | 4.0.1-sp1 (including) |
| Internet_explorer | Microsoft | 4.0.1-sp2 (including) | 4.0.1-sp2 (including) |
| Internet_explorer | Microsoft | 4.01 (including) | 4.01 (including) |
| Internet_explorer | Microsoft | 4.1 (including) | 4.1 (including) |
| Internet_explorer | Microsoft | 4.01-sp1 (including) | 4.01-sp1 (including) |
| Internet_explorer | Microsoft | 4.5 (including) | 4.5 (including) |
| Internet_explorer | Microsoft | 4.40.308 (including) | 4.40.308 (including) |
| Internet_explorer | Microsoft | 4.40.520 (including) | 4.40.520 (including) |
| Internet_explorer | Microsoft | 4.70.1155 (including) | 4.70.1155 (including) |
| Internet_explorer | Microsoft | 4.70.1158 (including) | 4.70.1158 (including) |
| Internet_explorer | Microsoft | 4.70.1215 (including) | 4.70.1215 (including) |
| Internet_explorer | Microsoft | 4.70.1300 (including) | 4.70.1300 (including) |
| Internet_explorer | Microsoft | 4.71.1008.3 (including) | 4.71.1008.3 (including) |
| Internet_explorer | Microsoft | 4.71.1712.6 (including) | 4.71.1712.6 (including) |
| Internet_explorer | Microsoft | 4.72.2106.8 (including) | 4.72.2106.8 (including) |
| Internet_explorer | Microsoft | 4.72.3110.8 (including) | 4.72.3110.8 (including) |
| Internet_explorer | Microsoft | 4.72.3612.1713 (including) | 4.72.3612.1713 (including) |
| Internet_explorer | Microsoft | 5 (including) | 5 (including) |
| Internet_explorer | Microsoft | 5.0 (including) | 5.0 (including) |
| Internet_explorer | Microsoft | 5.0.1 (including) | 5.0.1 (including) |
| Internet_explorer | Microsoft | 5.0.1-sp1 (including) | 5.0.1-sp1 (including) |
| Internet_explorer | Microsoft | 5.0.1-sp2 (including) | 5.0.1-sp2 (including) |
| Internet_explorer | Microsoft | 5.0.1-sp4 (including) | 5.0.1-sp4 (including) |
| Internet_explorer | Microsoft | 5.00.0518.10 (including) | 5.00.0518.10 (including) |
| Internet_explorer | Microsoft | 5.00.0910.1309 (including) | 5.00.0910.1309 (including) |
| Internet_explorer | Microsoft | 5.00.2014.0216 (including) | 5.00.2014.0216 (including) |
| Internet_explorer | Microsoft | 5.00.2516.1900 (including) | 5.00.2516.1900 (including) |
| Internet_explorer | Microsoft | 5.00.2614.3500 (including) | 5.00.2614.3500 (including) |
| Internet_explorer | Microsoft | 5.00.2919.800 (including) | 5.00.2919.800 (including) |
| Internet_explorer | Microsoft | 5.00.2919.6307 (including) | 5.00.2919.6307 (including) |
| Internet_explorer | Microsoft | 5.00.2920.0000 (including) | 5.00.2920.0000 (including) |
| Internet_explorer | Microsoft | 5.00.3103.1000 (including) | 5.00.3103.1000 (including) |
| Internet_explorer | Microsoft | 5.00.3105.0106 (including) | 5.00.3105.0106 (including) |
| Internet_explorer | Microsoft | 5.00.3314.2101 (including) | 5.00.3314.2101 (including) |
| Internet_explorer | Microsoft | 5.00.3315.1000 (including) | 5.00.3315.1000 (including) |
| Internet_explorer | Microsoft | 5.00.3502.1000 (including) | 5.00.3502.1000 (including) |
| Internet_explorer | Microsoft | 5.00.3700.1000 (including) | 5.00.3700.1000 (including) |
| Internet_explorer | Microsoft | 5.01 (including) | 5.01 (including) |
| Internet_explorer | Microsoft | 5.1 (including) | 5.1 (including) |
| Internet_explorer | Microsoft | 5.01-sp1 (including) | 5.01-sp1 (including) |
| Internet_explorer | Microsoft | 5.01-sp3 (including) | 5.01-sp3 (including) |
| Internet_explorer | Microsoft | 5.2.3 (including) | 5.2.3 (including) |
| Internet_explorer | Microsoft | 5.5 (including) | 5.5 (including) |
| Internet_explorer | Microsoft | 5.5-preview (including) | 5.5-preview (including) |
| Internet_explorer | Microsoft | 5.5-sp1 (including) | 5.5-sp1 (including) |
| Internet_explorer | Microsoft | 5.5-sp2 (including) | 5.5-sp2 (including) |
| Internet_explorer | Microsoft | 5.50.3825.1300 (including) | 5.50.3825.1300 (including) |
| Internet_explorer | Microsoft | 5.50.4030.2400 (including) | 5.50.4030.2400 (including) |
| Internet_explorer | Microsoft | 5.50.4134.0100 (including) | 5.50.4134.0100 (including) |
| Internet_explorer | Microsoft | 5.50.4134.0600 (including) | 5.50.4134.0600 (including) |
| Internet_explorer | Microsoft | 5.50.4308.2900 (including) | 5.50.4308.2900 (including) |
| Internet_explorer | Microsoft | 5.50.4522.1800 (including) | 5.50.4522.1800 (including) |
| Internet_explorer | Microsoft | 5.50.4807.2300 (including) | 5.50.4807.2300 (including) |
| Internet_explorer | Microsoft | 6 (including) | 6 (including) |
| Internet_explorer | Microsoft | 6-sp1 (including) | 6-sp1 (including) |
| Internet_explorer | Microsoft | 6.0 (including) | 6.0 (including) |
| Internet_explorer | Microsoft | 6.0.2600 (including) | 6.0.2600 (including) |
| Internet_explorer | Microsoft | 6.0.2800 (including) | 6.0.2800 (including) |
| Internet_explorer | Microsoft | 6.0.2800.1106 (including) | 6.0.2800.1106 (including) |
| Internet_explorer | Microsoft | 6.0.2900 (including) | 6.0.2900 (including) |
References
- http://archives.neohapsis.com/archives/bugtraq/2009-07/0192.html
- http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html
- http://websecurity.com.ua/3338/
- http://www.securityfocus.com/archive/1/505092/100/0/threaded
- http://www.securityfocus.com/archive/1/505120/100/0/threaded
- http://www.securityfocus.com/archive/1/505122/100/0/threaded
- http://archives.neohapsis.com/archives/bugtraq/2009-07/0192.html
- http://archives.neohapsis.com/archives/bugtraq/2009-07/0193.html
- http://websecurity.com.ua/3338/
- http://www.securityfocus.com/archive/1/505092/100/0/threaded
- http://www.securityfocus.com/archive/1/505120/100/0/threaded
- http://www.securityfocus.com/archive/1/505122/100/0/threaded