OSVDB ID: 27850 Title: Microsoft IE Cross Site Window Location Information Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
Microsoft Internet Explorer contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when a user accesses a web page that contains a malicious script that persists across navigation between pages, which will disclose window location of visited web pages in other domains resulting in a loss of confidentiality. |
Classification |
Location:
Remote / Network Access
Attack Type: Information Disclosure, Input Manipulation Impact: Loss of Confidentiality Solution: Patch / RCS Exploit: Exploit Unknown Disclosure: OSVDB Verified, Vendor Verified |
Solution |
Microsoft has released a patch to address this issue. Additionally, it is possible to correct the flaw by implementing the following workaround(s): Disable active scripting. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |