Microsoft Internet Explorer Various Cross-Domain Flaws Permit Remote Scripting in Arbitrary Domains
Categorie: Vulnerability Posted: 2003-09-15 by ReCall Views: 341 Source: Click here
Current Rating: Not rated
Details
Description: Several cross-domain scripting vulnerabilities were reported in Microsoft Internet Explorer (IE). A remote user can cause arbitrary scripting to be executed in an arbitrary security domain.
Liu Die Yu reported multiple vulnerabilities in IE. A remote user can create HTML that, when loaded by the target user, will cause scripting code to be executed in a different domain (such as the Local Computer domain). The scripting code can access information related to the domain, potentially including cookies, files, and system commands.
Impact: A remote user can create HTML that will cause arbitrary scripting code to be executed in an arbitrary security domain on the target user's system when the target user loads the HTML.
Solution: No solution was available at the time of this entry.
