CVE-2009-4074
Publicada el · Actualizada el
8Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackepss 15%
probabilidad de explotación
15%top 3% de las CVE
explotación observada
noninguna fuente lo reporta
The XSS Filter in Microsoft Internet Explorer 8 allows remote attackers to leverage the "response-changing mechanism" to conduct cross-site scripting (XSS) attacks against web sites that have no inherent XSS vulnerabilities, related to the details of output encoding and improper modification of an HTML attribute, aka "XSS Filter Script Handling Vulnerability."
Productos afectados
n/a · n/aReferencias
http://hackademix.net/2009/11/21/ies-xss-filter-creates-xss-vulnerabilities/https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7715http://www.owasp.org/images/5/50/OWASP-Italy_Day_IV_Maone.pdfhttp://www.securityfocus.com/bid/37135http://www.theregister.co.uk/2009/11/20/internet_explorer_security_flaw/