PT-2009-6252 · Microsoft · Internet Explorer

Inferno · Publicado 2009-11-24 · Atualizado 2021-07-23 · CVE-2009-4073

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer version 8

Description The issue allows remote attackers to discover a local pathname, and possibly a local username, by reading the dc:title element of a PDF document that was generated from a local web page. This is related to the printing functionality.

Recommendations For Microsoft Internet Explorer version 8, consider disabling the printing functionality for PDF documents generated from local web pages until a patch is available. Restrict access to sensitive local pathnames and usernames to minimize the risk of exploitation.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2009-4073

Produtos afetados

Internet Explorer

Referências · 7

• http://secunia.com/advisories/37362 · Nota
• http://securethoughts.com/2009/11/millions-of-pdf-invisibly-embedded-with-your-internal-disk-paths · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12355 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-4073 · Nota de Segurança
• http://securityfocus.com/archive/1/508010/100/0/threaded · Nota
• http://theregister.co.uk/2009/11/23/internet_explorer_file_disclosure_bug · Nota
• http://osvdb.org/60504 · Nota