PT-2011-2982 · Microsoft · Internet Explorer

David Bloom · Publicado 2011-04-13 · Atualizado 2022-02-28 · CVE-2011-1244

Positive Technologies (AI Summary)

CVSS v2.0

5.8

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 6 through 8

Description The issue allows remote attackers to obtain sensitive information or conduct clickjacking attacks via a crafted web site. An attacker could exploit this by constructing a specially crafted Web page disguised as legitimate content. The user's actions on the page could allow information disclosure or clickjacking, whereby the user's clicks perform unwanted actions.

Recommendations For Microsoft Internet Explorer versions 6 through 8, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Clickjacking

Enumeração de Fraquezas

CWE-1021

Identificadores relacionados

CVE-2011-1244

Produtos afetados

Internet Explorer

Referências · 8

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1244 · Nota de Segurança
• http://securitytracker.com/id?1025327 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11926 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-1244 · Nota de Segurança
• http://securityfocus.com/bid/47191 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-018 · Aviso do Fabricante
• https://docs.microsoft.com/security-updates/securitybulletins/2011/MS11-018 · Nota
• http://osvdb.org/71777 · Nota