PT-2008-3773 · Microsoft · Internet Explorer

Aviv Raff · Publicado 2008-05-18 · Atualizado 2021-07-23 · CVE-2008-2281

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 6.0 through 8.0b

Description: A cross-zone scripting issue in the Print Table of Links feature allows remote attackers to inject arbitrary web script or HTML in the Local Machine Zone. This is achieved through an HTML document containing a link with JavaScript sequences, which are evaluated by a resource script when a user prints the document.

Recommendations: For Internet Explorer versions 6.0 through 8.0b, consider disabling the Print Table of Links feature as a temporary workaround until a patch is available. Restrict access to the resource script that evaluates JavaScript sequences in printed documents to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2008-2281

Produtos afetados

Internet Explorer

Referências · 7

• 🔥 https://exploit-db.com/exploits/5619 · Exploit
• 🔥 http://aviv.raffon.net/2008/05/14/InternetExplorerQuotPrintTableOfLinksquotCrossZoneScriptingVulnerability.aspx · Exploit
• http://vupen.com/english/advisories/2008/1529/references · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-2281 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42416 · Nota
• http://secunia.com/advisories/30141 · Aviso do Fabricante
• http://securityfocus.com/bid/29217 · Nota