PT-2007-4832 · Microsoft · Internet Explorer 6

Published 2007-07-05 · Updated 2024-08-07 · CVE-2007-3576

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer 6

Description The issue allows remote attackers to bypass certain XSS protection schemes by executing web script from URIs of arbitrary scheme names ending with the "script" character sequence. This is done using the (1) vbscript: handler for scheme names with 7 through 9 characters, and the (2) javascript: handler for scheme names with 10 or more characters. However, other researchers dispute the significance of this issue, stating it only works when typed in the address bar.

Recommendations For Microsoft Internet Explorer 6, consider disabling the execution of scripts from arbitrary scheme names to minimize the risk of exploitation. As a temporary workaround, restrict the use of the vbscript: and javascript: handlers for scheme names with specific character lengths until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2007-3576

Affected Products

Internet Explorer 6

References · 8

• 🔥 http://groups.google.com/group/php-ids/browse_thread/thread/3ec15f69d6b3dba0 · Exploit
• 🔥 http://ha.ckers.org/blog/20070702/ie60-protocol-guessing · Exploit
• 🔥 http://sla.ckers.org/forum/read.php?2,13209,13218 · Exploit
• 🔥 http://0x000000.com/?i=375 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-3576 · Security Note
• http://sla.ckers.org/forum/read.php?2%2C13209%2C13218 · Note
• https://t.me/cvenotify/89681 · Telegram Post
• http://osvdb.org/45813 · Note