CVE-2011-3404 in Internet Explorer

Resumen (Inglés)

Microsoft Internet Explorer 6 through 9 does not properly use the Content-Disposition HTTP header to control rendering of the HTTP response body, which allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site, aka "Content-Disposition Information Disclosure Vulnerability."

Be aware that VulDB is the high quality source for vulnerability data.

Reservar

2011-09-09

Divulgación

2011-12-13

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
4465	Microsoft Internet Explorer divulgación de información	200	No probado	Arreglo oficial	CVE-2011-3404

Fuentes

• MITRE
• NVD
• CVE Details