Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2009-08-14	CVE-2009-2764	Denial of Service vulnerability in Microsoft Internet Explorer 8 Microsoft Internet Explorer 8.0.7100.0 on Windows 7 RC on the x64 platform allows remote attackers to cause a denial of service (application crash) via a certain DIV element in conjunction with SCRIPT elements that have empty contents and no reference to a valid external script location. network low complexity microsoft	5.0
2008-11-12	CVE-2008-4033	Information Exposure vulnerability in Microsoft XML Core Services Cross-domain vulnerability in Microsoft XML Core Services 3.0 through 6.0, as used in Microsoft Expression Web, Office, Internet Explorer, and other products, allows remote attackers to obtain sensitive information from another domain and corrupt the session state via HTTP request header fields, as demonstrated by the Transfer-Encoding field, aka "MSXML Header Request Vulnerability." network microsoft CWE-200	4.3