CVE-2009-0341: Microsoft Internet Explorer

High severity, CVSS 9.3. EPSS: 16% chance of exploitation in the next 30 days.

The shell32 module in Microsoft Internet Explorer 7.0 on Windows XP SP3 might allow remote attackers to execute arbitrary code via a long VALUE attribute in an INPUT element, possibly related to a stack consumption vulnerability.

Affected products

• Microsoft Internet Explorer: version 7 only

Published 2009-01-29. Last modified 2026-06-16.