CVE-2008-3472

Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy, and execute arbitrary code or obtain sensitive information, via a crafted HTML document, aka "HTM...

CVE-2008-3474

CVE-2008-3474 is an information-disclosure vulnerability in Microsoft Internet Explorer 6/7 . IE may fail to correctly determine the origin domain/zone of web scripts, enabling a crafted HTML page to disclose sensitive data across domains. This CVE is addressed within the MS08-058 Cumulative Secu...

Cumulative Security Update for Internet Explorer (956390)

This host is missing critical security update according to Microsoft Bulletin MS08-058. OpenVAS Vulnerability Test $Id: secpodms08-058900054.nasl 5934 2017-04-11 12:28:28Z antu123 $ Description: Cumulative Security Update for Internet Explorer 956390 Authors: Chandan S Copyright: Copyright C 2008...

CVE-2008-3474: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy and obtain sensitive information via a crafted HTML document, aka "Cross-Domain Information...

CVE-2008-3472: Undefined Security Weakness

Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy, and execute arbitrary code or obtain sensitive information, via a crafted HTML document, aka "HTM...

CVE-2008-3473: Undefined Security Weakness

Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy, and execute arbitrary code or obtain sensitive information, via a crafted HTML document, aka "Eve...

Cumulative Security Update for Internet Explorer (956390)

This host is missing critical security update according to Microsoft Bulletin MS08-058. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

CVE-2008-3473

Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy, and execute arbitrary code or obtain sensitive information, via a crafted HTML document, aka "Eve...

CVE-2008-3472

CVE-2008-3472 affects Microsoft Internet Explorer 6 and 7, part of a set of cross-domain vulnerabilities (HTML Element Cross-Domain, Event Handling Cross-Domain, Cross-Domain Information Disclosure, Uninitialized Memory Corruption, and HTML Objects Memory Corruption). The issues allow remote code...

CVE-2008-3473

CVE-2008-3473 and related cross-domain IE vulnerabilities affect Internet Explorer 6/7. Root cause: IE’s incorrect handling of the origin domain/zone for web script (Event Handling Cross-Domain and related) enables remote code execution or information disclosure across domains/zones. Affected: IE...

CVE-2008-3474

Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy and obtain sensitive information via a crafted HTML document, aka "Cross-Domain Information...

CSRF with Flash-vulnerability warning-the black bar safety net

CSRF with Flash Author: lake2 80sec EMail: lake280sec.com Site: http://www.80sec.com Date: 2008-10-04 From: http://www.80sec.com/release/csrf-with-flash.txt ----------- Directory 0×0 0 is purely bullshit. 0×0 1 with flash to initiate a CSRF attack 0×0 2 beyond JavaScript Hijacking 0×0 3 flash...

Microsoft Internet Explorer HTML Element Cross Domain Security Bypass Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain security-bypass vulnerability because the application fails to properly enforce the same-origin policy. An attacker can exploit this issue to execute arbitrary script code in another browser window's security zone. This may allow...

Microsoft Internet Explorer Cross Domain Information Disclosure Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability because the application fails to properly enforce the same-origin policy. An attacker can exploit this issue to execute arbitrary script code in another browser window's security zone. This may...

Microsoft Internet Explorer Event Handling Cross Domain Security Bypass Vulnerability

Description Microsoft Internet Explorer is prone to a cross-domain security-bypass vulnerability because the application fails to properly enforce the same-origin policy. An attacker can exploit this issue to execute arbitrary script code in another browser window's security zone. This may allow...

PT-2008-4867 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 through 7 Description: A remote code execution or information disclosure issue exists, allowing attackers to bypass the intended cross-domain security policy and execute arbitrary code or obtain sensitiv...

PT-2008-4869 · Microsoft · Internet Explorer

Name of the Vulnerable Software and Affected Versions: Microsoft Internet Explorer versions 6 through 7 Description: The issue allows remote attackers to bypass the intended cross-domain security policy and obtain sensitive information via a crafted HTML document. This is due to the improper...

Internet Explorer Mouse Event Handling Remote Code Execution (MS08-058; CVE-2008-3473)

Microsoft Internet Explorer is the most widely used Internet browser. A cross-domain vulnerability exists in Microsoft Internet Explorer. The vulnerability is due to the way Internet Explorer is handling the mouse event. A remote attacker can trigger this vulnerability by convincing a user to vie...

Gentoo Security Advisory GLSA 200712-22 (opera)

The remote host is missing updates announced in advisory GLSA 200712-22. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

FreeBSD Ports: thunderbird

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...