Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2008-4029
HistoryNov 12, 2008 - 11:30 p.m.

CVE-2008-4029

2008-11-1223:30:01
CWE-200
[email protected]
web.nvd.nist.gov

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.7 Medium

AI Score

Confidence

High

0.887 High

EPSS

Percentile

98.7%

JSON

Cross-domain vulnerability in Microsoft XML Core Services 3.0 and 4.0, as used in Internet Explorer, allows remote attackers to obtain sensitive information from another domain via a crafted XML document, related to improper error checks for external DTDs, aka “MSXML DTD Cross-Domain Scripting Vulnerability.”

Affected configurations

NVD
Node
microsoftinternet_explorer
AND
microsoftwindows_2000Matchsp4
OR
microsoftwindows_server_2003
OR
microsoftwindows_server_2003sp1
OR
microsoftwindows_server_2003sp1itanium
OR
microsoftwindows_server_2003sp2
OR
microsoftwindows_server_2008itanium
OR
microsoftwindows_server_2008x32
OR
microsoftwindows_server_2008x64
OR
microsoftwindows_vista
OR
microsoftwindows_vistax64
OR
microsoftwindows_vistasp1
OR
microsoftwindows_vistaMatchsp1
OR
microsoftwindows_xpprofessional_x64
OR
microsoftwindows_xpsp2professional_x64
OR
microsoftwindows_xpMatch-
OR
microsoftwindows_xpMatchsp3

Related

exploitpack 1
prion 1
checkpoint_advisories 2
seebug 2
packetstorm 1
cvelist 1
cve 1
exploitdb 1
mskb 1
securityvulns 2
nessus 1
openvas 2
exploitpack
exploitpack
Microsoft XML Core Services DTD - Cross-Domain Scripting (MS08-069)
2008-11-23 00:00:00
prion
prion
Cross site scripting
2008-11-12 23:30:00
checkpoint_advisories
checkpoint_advisories
Microsoft XML Core Services DTD Cross-Domain Scripting (MS08-069; CVE-2008-4029)
2008-11-11 00:00:00
Microsoft XML Core Services DTD Cross-Domain Scripting (MS08-069) - Ver2 (CVE-2008-4029)
2014-03-03 00:00:00
seebug
seebug
Microsoft XML Core Services DTD Cross-Domain Scripting PoC MS08-069
2008-11-25 00:00:00
Microsoft XML Core Services DTD跨域信息泄露漏洞（MS08-069）
2008-11-13 00:00:00
packetstorm
packetstorm
ms08-069.txt
2008-11-24 00:00:00
cvelist
cvelist
CVE-2008-4029
2008-11-12 23:00:00
cve
cve
CVE-2008-4029
2008-11-12 23:30:01
exploitdb
exploitdb
Microsoft XML Core Services DTD - Cross-Domain Scripting (MS08-069)
2008-11-23 00:00:00
mskb
mskb
MS08-069: Vulnerabilities in Microsoft XML Core Services could allow remote code execution
2018-04-17 20:28:02
securityvulns
securityvulns
Microsoft XML multiple security vulnerabilities
2008-11-12 00:00:00
Microsoft Security Bulletin MS08-069 – Critical Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (955218)
2008-11-12 00:00:00
nessus
nessus
MS08-069: Vulnerabilities in Microsoft XML Core Services Could Allow Remote Code Execution (955218)
2008-11-12 00:00:00
openvas
openvas
Microsoft XML Core Services Remote Code Execution Vulnerability (955218)
2008-11-12 00:00:00
Microsoft XML Core Services Remote Code Execution Vulnerability (955218)
2008-11-12 00:00:00

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:M/Au:N/C:P/I:N/A:N

5.7 Medium

AI Score

Confidence

High

0.887 High

EPSS

Percentile

98.7%

JSON
Related for NVD:CVE-2008-4029
exploitpack1prion1checkpoint_advisories2seebug2packetstorm1cvelist1cve1exploitdb1mskb1securityvulns2nessus1openvas2