← back
CVE-2008-4029

CVE-2008-4029

EPSS 26.7%
Cross-domain vulnerability in Microsoft XML Core Services 3.0 and 4.0, as used in Internet Explorer, allows remote attackers to obtain sensitive information from another domain via a crafted XML document, related to improper error checks for external DTDs, aka "MSXML DTD Cross-Domain Scripting Vulnerability."
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/7196unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://marc.info/?l=bugtraq&m=122703006921213&w=2https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-069http://securitytracker.com/id?1021164https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5999http://www.securityfocus.com/bid/32155http://www.us-cert.gov/cas/techalerts/TA08-316A.htmlhttp://www.vupen.com/english/advisories/2008/3111