CVE-2009-2536: Microsoft Internet Explorer 5 through 8 allows remote attackers to cause a denial of service (memory consum...

Security readout for executives and security teams

This is an old Internet Explorer denial-of-service issue. A malicious webpage could make IE 5 through 8 consume memory and crash by abusing a large Select object length value. The sources describe browser disruption, not data theft or code execution. Exposure is most likely limited to legacy environments still running Internet Explorer 5, 6, 7, or 8, or embedded workflows depending on those engines. Modern supported browsers are not identified as affected in the supplied CVE source bundle. Treat this as a legacy-risk cleanup item unless affected IE versions remain in production. Business urgency rises if users still browse external sites with IE 5 through 8, because a malicious page could disrupt workstations. Mitigation focus: Identify any remaining Internet Explorer 5 through 8 usage.; Retire affected browsers or move users to supported browsers.; Check Microsoft or vendor guidance for applicable historical updates..

Prepared

Jun 28, 2026, 10:26 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.