CVE-2013-0015 in Internet Explorer
Summary
Microsoft Internet Explorer 6 through 9 does not properly perform auto-selection of the Shift JIS encoding, which allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site that triggers cross-domain scrolling events, aka "Shift JIS Character Encoding Vulnerability."
Be aware that VulDB is the high quality source for vulnerability data.
Reservation
11/27/2012
Disclosure
02/13/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 7633 | Microsoft Internet Explorer Shift JIS Character Encoding information disclosure | 200 | Proof-of-Concept | Official fix | CVE-2013-0015 |