CVE-2011-3404 in Internet Explorer
Zusammenfassung (Englisch)
Microsoft Internet Explorer 6 through 9 does not properly use the Content-Disposition HTTP header to control rendering of the HTTP response body, which allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Content-Disposition Information Disclosure Vulnerability."
Be aware that VulDB is the high quality source for vulnerability data.
Reservieren
09.09.2011
Veröffentlichung
13.12.2011
Status
Bestätigt
Einträge
VulDB provides additional information and datapoints for this CVE:
| ID | Schwachstelle | CWE | Aus | Mas | CVE |
|---|---|---|---|---|---|
| 4465 | Microsoft Internet Explorer Information Disclosure | 200 | Unbewiesen | Offizieller Fix | CVE-2011-3404 |