Microsoft Internet Explorer 6, 7, and 8 does not properly determine the origin of script code, which allows remote attackers to execute script in an unintended domain or security zone, and obtain sensitive information, via unspecified vectors, aka "Event Handler Cross-Domain Vulnerability."
References
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
History
21 Nov 2024, 01:13
Type | Values Removed | Values Added |
---|---|---|
References | () http://www.us-cert.gov/cas/techalerts/TA10-222A.html - US Government Resource | |
References | () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-053 - | |
References | () https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11954 - |
07 Dec 2023, 18:38
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:microsoft:windows_vista:*:sp1:x64:*:*:*:*:* |
Information
Published : 2010-08-11 18:47
Updated : 2024-11-21 01:13
NVD link : CVE-2010-1258
Mitre link : CVE-2010-1258
CVE.ORG link : CVE-2010-1258
JSON object : View
Products Affected
microsoft
- windows_server_2008
- windows_7
- windows_server_2003
- internet_explorer
- windows_xp
- windows_2003_server
- windows_vista
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor