PRIOn knowledge basePRION:CVE-2009-4074Cross site scripting
5.2 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
76.4%
The XSS Filter in Microsoft Internet Explorer 8 allows remote attackers to leverage the “response-changing mechanism” to conduct cross-site scripting (XSS) attacks against web sites that have no inherent XSS vulnerabilities, related to the details of output encoding and improper modification of an HTML attribute, aka “XSS Filter Script Handling Vulnerability.”
| CPE | Name | Operator | Version |
|---|---|---|---|
| internet_explorer | eq | 8 |
References
www.owasp.org/images/5/50/OWASP-Italy_Day_IV_Maone.pdf
www.securityfocus.com/bid/37135
www.theregister.co.uk/2009/11/20/internet_explorer_security_flaw/
docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002
hackademix.net/2009/11/21/ies-xss-filter-creates-xss-vulnerabilities/
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7715
Related
5.2 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.005 Low
EPSS
Percentile
76.4%