PT-2005-5488 · Microsoft · Xmlhttprequest+1

Michal Zalewski · Published 2005-12-31 · Updated 2021-07-23 · CVE-2005-4827

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Internet Explorer version 6.0

Description The issue allows remote attackers to bypass the same origin security policy and make requests outside of the intended domain. This is achieved by calling open on an XMLHttpRequest object (Microsoft.XMLHTTP) and using tab, newline, and carriage return characters within the first argument (method name). This method is supported by some proxy servers that convert tabs to spaces, which can be leveraged to conduct referer spoofing, HTTP Request Smuggling, and other attacks.

Recommendations For Internet Explorer version 6.0, consider disabling the use of XMLHttpRequest objects until a patch is available. Restrict access to sensitive domains and resources to minimize the risk of exploitation. Avoid using the open method with unvalidated input in the method name argument.

Exploit

Fix

Related Identifiers

CVE-2005-4827

Affected Products

Internet Explorer

Xmlhttprequest

References · 5

• 🔥 http://securityfocus.com/archive/1/411585 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-4827 · Security Note
• http://seclists.org/fulldisclosure/2007/Feb/0081.html · Vendor Advisory
• http://securityfocus.com/archive/1/459172/100/0/threaded · Note
• http://securityfocus.com/bid/14969 · Note