CVE-2009-2536: Microsoft Internet Explorer

Medium severity, CVSS 4.3. EPSS: 19.3% chance of exploitation in the next 30 days.

Microsoft Internet Explorer 5 through 8 allows remote attackers to cause a denial of service (memory consumption and application crash) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692.

Affected products

• Microsoft Internet Explorer: up to and including 8; version 5 only; version 6 only; version 7 only

Published 2009-07-20. Last modified 2026-06-16.