Lucene search

K
cve[email protected]CVE-2008-2281
HistoryMay 18, 2008 - 2:20 p.m.

CVE-2008-2281

2008-05-1814:20:00
web.nvd.nist.gov
22
cve-2008-2281
cross-zone scripting
internet explorer
vulnerability
remote attackers
web script
html

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.1 Medium

AI Score

Confidence

High

0.958 High

EPSS

Percentile

99.5%

Cross-zone scripting vulnerability in the Print Table of Links feature in Internet Explorer 6.0, 7.0, and 8.0b allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via an HTML document with a link containing JavaScript sequences, which are evaluated by a resource script when a user prints this document.

Affected configurations

NVD
Node
microsoftieMatch8.0b
OR
microsoftinternet_explorerMatch6.0
OR
microsoftinternet_explorerMatch7.0

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

6.1 Medium

AI Score

Confidence

High

0.958 High

EPSS

Percentile

99.5%

Related for CVE-2008-2281