PT-2011-3821 · Microsoft · Internet Explorer
Rosario Valotta
·
Publicado
2011-06-03
·
Atualizado
2021-07-23
·
CVE-2011-2383
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Microsoft Internet Explorer versions 9 and earlier
Description
The issue allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing an http: URL that redirects to a file: URL. This is related to a "cookiejacking" issue. An attacker could exploit the vulnerability by constructing a specially crafted Web page that could allow information disclosure if a user viewed the Web page and performed a drag-and-drop operation, potentially gaining access to cookie files stored in the local machine.
Recommendations
For Microsoft Internet Explorer versions 9 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
RCE
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Internet Explorer