CVE-2006-3280 in Internet Explorer

Resumen (Inglés)

Cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker s originating site that specifies a Location HTTP header that references the target site, which then makes that content available through the outerHTML attribute of the object, aka "Redirect Cross-Domain Information Disclosure Vulnerability."

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

2006-06-28

Divulgación

2006-06-28

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
2443	Microsoft Internet Explorer Script divulgación de información		Prueba de concepto	Arreglo oficial	CVE-2006-3280
2438	Microsoft Internet Explorer Position Element desbordamiento de búfer	119	Prueba de concepto	Arreglo oficial	CVE-2006-3280
2344	Microsoft Internet Explorer HTA recorrido de directorios	22	Prueba de concepto	Arreglo oficial	CVE-2006-3280
2343	Microsoft Internet Explorer object.documentElement.outerHTML divulgación de información		Prueba de concepto	Arreglo oficial	CVE-2006-3280

Fuentes

• MITRE
• NVD
• CVE Details