CVEvulnerability
CVE-2008-5551
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2008-12-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-79
Description
The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting data at two different positions within an HTML document, related to STYLE elements and the CSS expression property, aka a "double injection."
Affected configurations
• microsoft internet explorer 8
Related
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness
References
- http://securityreason.com/securityalert/4724 securityreason.com
- http://www.securityfocus.com/archive/1/499124/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32780 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47277 exchange.xforce.ibmcloud.com
- http://securityreason.com/securityalert/4724 securityreason.com
- http://www.securityfocus.com/archive/1/499124/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/32780 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/47277 exchange.xforce.ibmcloud.com