CVEvulnerability
CVE-2009-4074
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-11-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:N/I:P/A:N
Description
The XSS Filter in Microsoft Internet Explorer 8 allows remote attackers to leverage the "response-changing mechanism" to conduct cross-site scripting (XSS) attacks against web sites that have no inherent XSS vulnerabilities, related to the details of output encoding and improper modification of an HTML attribute, aka "XSS Filter Script Handling Vulnerability."
Affected configurations
• microsoft internet explorer 8
References
- http://hackademix.net/2009/11/21/ies-xss-filter-creates-xss-vulnerabilities/ hackademix.net
- http://www.owasp.org/images/5/50/OWASP-Italy_Day_IV_Maone.pdf www.owasp.org
- http://www.securityfocus.com/bid/37135 www.securityfocus.com
- http://www.theregister.co.uk/2009/11/20/internet_explorer_security_flaw/ www.theregister.co.uk
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7715 oval.cisecurity.org
- http://hackademix.net/2009/11/21/ies-xss-filter-creates-xss-vulnerabilities/ hackademix.net
- http://www.owasp.org/images/5/50/OWASP-Italy_Day_IV_Maone.pdf www.owasp.org
- http://www.securityfocus.com/bid/37135 www.securityfocus.com
- http://www.theregister.co.uk/2009/11/20/internet_explorer_security_flaw/ www.theregister.co.uk
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-002 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7715 oval.cisecurity.org