CVE-2013-1450 in Internet Explorer

Resumen (Inglés)

Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not properly reuse TCP sessions to the proxy server, which allows remote attackers to obtain sensitive information intended for a specific host via a crafted HTML document that triggers many HTTPS requests and then triggers an HTTP request to that host, as demonstrated by reading a Cookie header, aka MSRC 12096gd.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservar

2013-01-28

Divulgación

2013-01-29

Estado

Confirmado

Voces

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerabilidad	CWE	Exp	Con	CVE
7511	Microsoft Internet Explorer TCP Session divulgación de información	16	Prueba de concepto	Unavailable	CVE-2013-1450

Fuentes

• MITRE
• NVD
• CVE Details