8 matches found
Internet Explorer memory corruption
Memory corruption then setting outerHTML from body style...
CVE-2006-6986
Cross-domain vulnerability in PhaseOut 5.4.4 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site, which...
CVE-2006-6987
Cross-domain vulnerability in FineBrowser Freeware 3.2.2 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target...
CVE-2006-6990
Cross-domain vulnerability in Enigma Browser 3.8.8 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site,...
CVE-2006-6983
CVE-2006-6983 documents a cross-domain information disclosure in MYweb4net Browser 3.8.8.0. The vulnerability arises from an object tag with a data parameter referencing a link that points to a Location header on the attacker's site, allowing the target content to be exposed via the outerHTML att...
CVE-2006-6991
Cross-domain vulnerability in Fast Browser Pro 8.1 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site that specifies a Location HTTP header that references the target site,...
Microsoft Internet Explorer OuterHTML重新定向信息泄漏漏洞(MS06-042)
Internet Explorer是微软发布的非常流行的WEB浏览器。 Microsoft Internet Explorer中存在跨域漏洞。攻击者可以创建特制的对象标签,该标签的数据参数引用了攻击者站点的链接,而这个站点将Location HTTP首部指定为目标站点,这样就可以通过对象的outerHTML属性读取敏感信息。 Microsoft Internet Explorer 6.0 Microsoft已经为此发布了一个安全公告(MS06-042)以及相应补丁: MS06-042:Cumulative Security Update for Internet Explorer...
Microsoft Internet Explorer 5.0.1 - OuterHTML redirection Handling Information Disclosure
source: https://www.securityfocus.com/bid/18682/info Microsoft Internet Explorer is prone to an information-disclosure vulnerability because it fails to properly enforce cross-domain policies. This issue may allow attackers to access arbitrary websites in the context of a targeted user's browser...