Microsoft Internet Explorer 6, 7, and 8 does not properly determine the origin of script code, which allows remote attackers to execute script in an unintended domain or security zone, and obtain sensitive information, via unspecified vectors, aka "Event Handler Cross-Domain Vulnerability."
References
Configurations
Configuration 1 (hide)
AND |
|
Configuration 2 (hide)
AND |
|
Configuration 3 (hide)
AND |
|
History
07 Dec 2023, 18:38
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:o:microsoft:windows_vista:*:sp2:x64:*:*:*:*:* |
23 Jul 2021, 15:12
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:microsoft:ie:8:*:*:*:*:*:*:* cpe:2.3:a:microsoft:ie:6:*:*:*:*:*:*:* |
cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:7:*:*:*:*:*:*:* cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:* |
Information
Published : 2010-08-11 18:47
Updated : 2024-02-04 17:54
NVD link : CVE-2010-1258
Mitre link : CVE-2010-1258
CVE.ORG link : CVE-2010-1258
JSON object : View
Products Affected
microsoft
- windows_2003_server
- windows_7
- windows_xp
- internet_explorer
- windows_server_2008
- windows_vista
- windows_server_2003
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor