CVE-2011-4689

2022-10-0316:15:14

mitre

www.cve.org

microsoft internet explorer

same origin policy

data leakage

javascript code

6.3 Medium

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

76.3%

JSON

Microsoft Internet Explorer 6 through 9 does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code.

References

lcamtuf.coredump.cx/cachetime/

secunia.com/advisories/47129