CVE-2005-4089

Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive to download files from other domains that are not valid Cascading Style Sheets CSS files, as demonstrated using Google Desktop, aka...

CVE-2005-4089

Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive to download files from other domains that are not valid Cascading Style Sheets CSS files, as demonstrated using Google Desktop, aka...

CVE-2005-4089

CVE-2005-4089 is a cross-domain information disclosure vulnerability in Internet Explorer, triggered by parsing a CSS file via the @import directive. The flaw allows an attacker to read data from another IE security zone or domain when a user visits a specially crafted page or opens a crafted lin...