PT-2018-1653 · Microsoft · Internet Explorer 11+1

Masato Kinugawa · Publicado 2018-09-11 · Atualizado 2018-11-09 · CVE-2018-8470

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Média

Vetor base

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Internet Explorer 11

Description A security feature bypass issue exists due to how scripts are handled, allowing a universal cross-site scripting (UXSS) condition. This could enable a remote attacker to perform a cross-site scripting attack using a specially crafted web page, potentially accessing any session belonging to web pages currently opened or cached by the browser.

Recommendations For Internet Explorer 11, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

BDU:2018-01212

CVE-2018-8470

Produtos afetados

Internet Explorer

Internet Explorer 11

Referências · 7

• https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-8470 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2018-8470 · Nota de Segurança
• http://securityfocus.com/bid/105267 · Nota
• https://osv.dev/vulnerability/CVE-2018-8470 · Aviso do Fabricante
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8470 · Nota de Segurança
• https://bdu.fstec.ru/vul/2018-01212 · Nota de Segurança
• http://securitytracker.com/id/1041632 · Nota