CVE-2010-1489

The XSS Filter in Microsoft Internet Explorer 8 does not properly perform neutering for the SCRIPT tag, which allows remote attackers to conduct cross-site scripting XSS attacks against web sites that have no inherent XSS vulnerabilities, a different issue than CVE-2009-4074...

CVE-2010-1489

CVE-2010-1489 is an IE8 XSS Filter issue caused by inadequate neutering of the SCRIPT tag, enabling remote XSS on sites with no inherent vulnerabilities. Microsoft’s KB978207 (MS10-002) describes the fix as a cumulative security update for Internet Explorer that resolves remote code execution vul...