CVE-2009-2536

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5 through 8

Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption and application crash, by providing a large integer value for the length property of a Select object.

Recommendations For Microsoft Internet Explorer versions 5 through 8, as a temporary workaround, consider restricting the use of the Select object until a patch is available.