CVEvulnerability
CVE-2010-1258
4.3 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2010-08-11
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 4.3 MEDIUM — AV:N/AC:M/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-200
Description
Microsoft Internet Explorer 6, 7, and 8 does not properly determine the origin of script code, which allows remote attackers to execute script in an unintended domain or security zone, and obtain sensitive information, via unspecified vectors, aka "Event Handler Cross-Domain Vulnerability."
Affected configurations
• microsoft internet explorer 6
• microsoft internet explorer 7
• microsoft internet explorer 8
Related
Weakness · CWE (1)
- CWE-200 Exposure of Sensitive Information to an Unauthorized Actor weakness
References
- http://www.us-cert.gov/cas/techalerts/TA10-222A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-053 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11954 oval.cisecurity.org
- http://www.us-cert.gov/cas/techalerts/TA10-222A.html US Government Resource
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-053 docs.microsoft.com
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11954 oval.cisecurity.org