Lucene search

[email protected]NVD:CVE-2010-3243

HistoryOct 13, 2010 - 7:00 p.m.

CVE-2010-3243

2010-10-1319:00:46

CWE-79

[email protected]

web.nvd.nist.gov

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

AI Score

5.5

Confidence

High

EPSS

0.919

Percentile

99.0%

JSON

Cross-site scripting (XSS) vulnerability in the toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2 and Office SharePoint Server 2007 SP2, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors, aka “HTML Sanitization Vulnerability.”

Affected configurations

Nvd

Node

microsoftsharepoint_serverMatch2007sp2x32

microsoftsharepoint_serverMatch2007sp2x64

microsoftsharepoint_servicesMatch3.0sp2x32

microsoftsharepoint_servicesMatch3.0sp2x64

Node

microsoftinternet_explorerMatch8

AND

microsoftwindows_7Match-

microsoftwindows_server_2003sp2

microsoftwindows_server_2008x32

microsoftwindows_server_2008x64

microsoftwindows_server_2008sp2x32

microsoftwindows_server_2008sp2x64

microsoftwindows_server_2008Matchr2itanium

microsoftwindows_server_2008Matchr2x64

microsoftwindows_vistasp1

microsoftwindows_vistasp2

microsoftwindows_xpsp3

microsoftwindows_xpMatch-sp2x64

VendorProductVersionCPE
microsoftsharepoint_server2007cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:x32:*:*:*:*:*
microsoftsharepoint_server2007cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:x64:*:*:*:*:*
microsoftsharepoint_services3.0cpe:2.3:a:microsoft:sharepoint_services:3.0:sp2:x32:*:*:*:*:*
microsoftsharepoint_services3.0cpe:2.3:a:microsoft:sharepoint_services:3.0:sp2:x64:*:*:*:*:*
microsoftinternet_explorer8cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*
microsoftwindows_7-cpe:2.3:o:microsoft:windows_7:-:*:*:*:*:*:*:*
microsoftwindows_server_2003*cpe:2.3:o:microsoft:windows_server_2003:*:sp2:*:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:*:x32:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:*:x64:*:*:*:*:*
microsoftwindows_server_2008*cpe:2.3:o:microsoft:windows_server_2008:*:sp2:x32:*:*:*:*:*

Vendor	Product	Version	CPE
microsoft	sharepoint_server	2007	cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:x32:::::*
microsoft	sharepoint_server	2007	cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:x64:::::*
microsoft	sharepoint_services	3.0	cpe:2.3:a:microsoft:sharepoint_services:3.0:sp2:x32:::::*
microsoft	sharepoint_services	3.0	cpe:2.3:a:microsoft:sharepoint_services:3.0:sp2:x64:::::*
microsoft	internet_explorer	8	cpe:2.3:a:microsoft:internet_explorer:8:::::::*
microsoft	windows_7	-	cpe:2.3:o:microsoft:windows_7:-:::::::*
microsoft	windows_server_2003	*	cpe:2.3:o:microsoft:windows_server_2003::sp2::::::*
microsoft	windows_server_2008	*	cpe:2.3:o:microsoft:windows_server_2008:::x32:::::*
microsoft	windows_server_2008	*	cpe:2.3:o:microsoft:windows_server_2008:::x64:::::*
microsoft	windows_server_2008	*	cpe:2.3:o:microsoft:windows_server_2008::sp2:x32:::::