vendor:
Internet Explorer
by:
milw0rm.com
7,5
CVSS
HIGH
Script Injection
79
CWE
Product Name: Internet Explorer
Affected Version From: Internet Explorer 8.0.7100.0
Affected Version To: Internet Explorer 8.0.7100.0
Patch Exists: Yes
Related CWE: N/A
CPE: a:microsoft:internet_explorer:8.0.7100.0
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows 7 x64 RC
2009
IE8.0.7100.0 on W7 x64 RC
This vulnerability allows remote attackers to inject arbitrary web script or HTML via a crafted HTML document. This vulnerability affects Internet Explorer 8.0.7100.0 on Windows 7 x64 RC. The vulnerability is due to the application not properly sanitizing user-supplied input. An attacker can exploit this vulnerability to inject arbitrary web script or HTML into a user's browser in the context of the affected application. This may allow the attacker to steal cookie-based authentication credentials and to control how the site is rendered to the user; other attacks are also possible.
Mitigation:
The vendor has released a patch to address this vulnerability.
