CVE-2009-4074
Publicada em · Atualizada em
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 15%
probabilidade de exploração
15%top 3% das CVEs
exploração observada
nãonenhuma fonte reporta
The XSS Filter in Microsoft Internet Explorer 8 allows remote attackers to leverage the "response-changing mechanism" to conduct cross-site scripting (XSS) attacks against web sites that have no inherent XSS vulnerabilities, related to the details of output encoding and improper modification of an HTML attribute, aka "XSS Filter Script Handling Vulnerability."
Produtos afetados
n/a · n/aReferências
http://hackademix.net/2009/11/21/ies-xss-filter-creates-xss-vulnerabilities/https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7715http://www.owasp.org/images/5/50/OWASP-Italy_Day_IV_Maone.pdfhttp://www.securityfocus.com/bid/37135http://www.theregister.co.uk/2009/11/20/internet_explorer_security_flaw/