Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Microsoft Internet Explorer Script URL Cross-Domain Access Violation Vulnerability

There are a number of exploits available available, including the following proof-of-concept demos:
http://www.freewebs.com/applesoup/CrossBar/CrossSiteSB.htm
http://www.freewebs.com/applesoup/CrossBar/CrossZoneSB.htm
http://www.safecenter.net/liudieyu/WsFakeSrc/WsFakeSrc-MyPage.HTM
http://www.freewebs.com/applesoup/CrossMediaBar/demo.html
http://www.freewebs.com/applesoup/CrossMediaBar/CrossSite.htm
http://ip3e83566f.speed.planet.nl/hacked-by-chinese/5.htm

Further exploits are also included in BIDs 8577, 9769 and 9798.







 

Privacy Statement
Copyright 2008, SecurityFocus