VULNERABILITY INTELLIGENCE
CVE-2008-4127
CVSS score4.3 MEDIUM
EPSS probability16.35%
CISA KEVNot currently listed
Published2008-09-18
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:N/I:N/A:P
Description
Mshtml.dll in Microsoft Internet Explorer 7 Gold 7.0.5730 and 8 Beta 8.0.6001 on Windows XP SP2 allows remote attackers to cause a denial of service (failure of subsequent image rendering) via a crafted PNG file, related to an infinite loop in the CDwnTaskExec::ThreadExec function.