Microsoft Internet Explorer JavaScript Cross Domain Information Disclosure Vulnerability

Bugtraq ID: 47192
Class: Origin Validation Error
CVE: CVE-2011-1245
Remote: Yes
Local: No
Published: Apr 12 2011 12:00AM
Updated: Apr 14 2011 04:04PM
Credit: Stephen Fewer of Harmony Security and David Bloom of Google Inc.
Vulnerable: Microsoft Internet Explorer 7.0
Microsoft Internet Explorer 6.0 SP2
Microsoft Internet Explorer 6.0 SP1
Microsoft Internet Explorer 6.0
Avaya Messaging Application Server 5
Avaya Messaging Application Server 4
Avaya Meeting Exchange - Webportal 0
Avaya Meeting Exchange - Web Conferencing Server 0
Avaya Meeting Exchange - Streaming Server 0
Avaya Meeting Exchange - Recording Server 0
Avaya Meeting Exchange - Client Registration Server 0
Avaya Meeting Exchange 5.0 .0.52
Avaya Meeting Exchange 5.2 SP2
Avaya Meeting Exchange 5.2 SP1
Avaya Meeting Exchange 5.2
Avaya Meeting Exchange 5.1 SP1
Avaya Meeting Exchange 5.1
Avaya Meeting Exchange 5.0 SP2
Avaya Meeting Exchange 5.0 SP1
Avaya Meeting Exchange 5.0
Avaya Communication Server 1000 Telephony Manager 4.0
Avaya Communication Server 1000 Telephony Manager 3.0
Avaya CallPilot 5.0
Avaya CallPilot 4.0
Avaya Aura Conferencing 6.0 Standard
Avaya Aura Conferencing 6.0 SP1 Standard
Not Vulnerable:


 

Privacy Statement
Copyright 2010, SecurityFocus