Microsoft Internet Explorer 'location' & 'location.href' Cross Domain Security Bypass Vulnerability

Microsoft Internet Explorer 'location' & 'location.href' Cross Domain Security Bypass Vulnerability

Microsoft Internet Explorer is prone to a cross-domain scripting security-bypass vulnerability because the application fails to properly enforce the same-origin policy.

An attacker can exploit this issue to execute arbitrary script code in another browser window's security zone. This may allow the attacker to steal cookie-based authentication credentials and launch other attacks.

NOTE: Attackers exploiting this issue on Internet Explorer 5.01 SP4 and Internet Explorer 6 SP1 running on Microsoft Windows 2000 SP4 may leverage the issue to execute remote code. Other vulnerable versions of the browser are prone only to information disclosure.