CVE-2009-2536

CVE-2009-2536 describes a denial-of-service vulnerability affecting Microsoft Internet Explorer versions 5 through 8, where a remote attacker can crash the application and consume memory. This is achieved by manipulating the length property of a Select object with a large integer value. The vulnerability has a CVSS score of 4.3, indicating a medium severity, and requires user interaction (medium attack complexity) to exploit, leading to a partial availability impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.