Microsoft Internet Explorer Anti-XSS Filter Vulnerabilities

Internet Explorer is prone to anti-xss filter vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2008-5556

The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not recognize attack patterns designed to operate against web pages that are encoded with utf-7, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting crafted utf-7 content. NOTE: the...

CVE-2008-5556

Summary of CVE-2008-5556 : The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 fails to recognize certain attack patterns when pages use utf-7 encoding, allowing potential XSS bypass. The vendor reportedly disputes the issue, stating behaviour is by design. Connected sources (OpenVAS/PT Secu...