Vulnerability Details CVE-2007-2161
Microsoft Internet Explorer 7 allows remote attackers to cause a denial of service (browser hang) via JavaScript that matches a regular expression against a long string, as demonstrated using /(.)*/.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.277
EPSS Ranking 96.2%
CVSS Severity
CVSS v2 Score 4.3
References
- http://osvdb.org/43314
- http://www.securityfocus.com/archive/1/466017/100/0/threaded
- http://www.securityfocus.com/archive/1/466043/100/0/threaded
- http://www.securityfocus.com/archive/1/466175/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33715
- http://osvdb.org/43314
- http://www.securityfocus.com/archive/1/466017/100/0/threaded
- http://www.securityfocus.com/archive/1/466043/100/0/threaded
- http://www.securityfocus.com/archive/1/466175/100/0/threaded
- https://exchange.xforce.ibmcloud.com/vulnerabilities/33715
Products affected by CVE-2007-2161
-
cpe:2.3:a:microsoft:internet_explorer:7.0