CVE-2008-4127

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 16.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2008-09-18 · updated 2026-06-16
Weakness: CWE-399

Description

Mshtml.dll in Microsoft Internet Explorer 7 Gold 7.0.5730 and 8 Beta 8.0.6001 on Windows XP SP2 allows remote attackers to cause a denial of service (failure of subsequent image rendering) via a crafted PNG file, related to an infinite loop in the CDwnTaskExec::ThreadExec function.

Affected products

Microsoft Internet Explorer 11: 7.0.5730-unknown, 8.0.6001-beta

References

http://securityreason.com/securityalert/4273
http://www.securityfocus.com/archive/1/496483/100/0/threaded
http://www.securityfocus.com/bid/31215
https://exchange.xforce.ibmcloud.com/vulnerabilities/45225
http://securityreason.com/securityalert/4273
http://www.securityfocus.com/archive/1/496483/100/0/threaded
http://www.securityfocus.com/bid/31215
https://exchange.xforce.ibmcloud.com/vulnerabilities/45225

Get alerted when CVE-2008-4127 or the next vulnerability affects your stack