Microsoft Internet Explorer 6 on Windows XP SP2 and SP3, and Internet Explorer 7 on Vista, allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls createElement to create an instance of the LI element, and then calls setAttribute to set the value attribute.
                
            References
                    | Link | Resource | 
|---|---|
| http://www.exploit-db.com/exploits/9455 | 
Configurations
                    Configuration 1 (hide)
| AND | 
 
 | 
Configuration 2 (hide)
| AND | 
 
 | 
Information
                Published : 2009-08-31 09:30
Updated : 2017-09-18 18:29
NVD link : CVE-2009-3019
Mitre link : CVE-2009-3019
JSON object : View
CWE
                
                    
                        
                        CWE-94
                        
            Improper Control of Generation of Code ('Code Injection')
Products Affected
                microsoft
- windows_xp
- windows_vista
- internet_explorer


