CVE-2008-4127: Microsoft Internet Explorer

Medium severity, CVSS 4.3. EPSS: 16.4% chance of exploitation in the next 30 days.

Mshtml.dll in Microsoft Internet Explorer 7 Gold 7.0.5730 and 8 Beta 8.0.6001 on Windows XP SP2 allows remote attackers to cause a denial of service (failure of subsequent image rendering) via a crafted PNG file, related to an infinite loop in the CDwnTaskExec::ThreadExec function.

Affected products

• Microsoft Internet Explorer: version 7.0.5730 only; version 8.0.6001 only

Published 2008-09-18. Last modified 2026-06-16.