PT-2008-3773 · Microsoft · Internet Explorer

Aviv Raff · Published 2008-05-18 · Updated 2021-07-23 · CVE-2008-2281

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 6.0 through 8.0b

Description: A cross-zone scripting issue in the Print Table of Links feature allows remote attackers to inject arbitrary web script or HTML in the Local Machine Zone. This is achieved through an HTML document containing a link with JavaScript sequences, which are evaluated by a resource script when a user prints the document.

Recommendations: For Internet Explorer versions 6.0 through 8.0b, consider disabling the Print Table of Links feature as a temporary workaround until a patch is available. Restrict access to the resource script that evaluates JavaScript sequences in printed documents to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2008-2281

Affected Products

Internet Explorer

References · 7

• 🔥 https://exploit-db.com/exploits/5619 · Exploit
• 🔥 http://aviv.raffon.net/2008/05/14/InternetExplorerQuotPrintTableOfLinksquotCrossZoneScriptingVulnerability.aspx · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-2281 · Security Note
• http://secunia.com/advisories/30141 · Vendor Advisory
• http://vupen.com/english/advisories/2008/1529/references · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/42416 · Note
• http://securityfocus.com/bid/29217 · Note