Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Jorge Luis Alvarez Medina

Researcher fromCore Security Technologies
#41276of 56,337
7.1Total CVSS
Vulnerabilities · 1
PT-2009-3704
7.1
2009-06-10
Microsoft · Internet Explorer · CVE-2009-1140
**Name of the Vulnerable Software and Affected Versions** Microsoft Internet Explorer versions 5.01 SP4 through 7 for various Windows operating systems **Description** The issue allows remote attackers to bypass the Same Origin Policy, potentially leading to information disclosure. This is due to the incorrect handling of cached content, which can be exploited by constructing a specially crafted Web page. If successfully exploited, an attacker could view content from the local computer or another browser window in another domain or Internet Explorer zone. **Recommendations** For Microsoft Internet Explorer versions 5.01 SP4 through 7, consider restricting access to cached content to minimize the risk of exploitation. As a temporary workaround, avoid viewing specially crafted Web pages that could potentially bypass Internet Explorer domain restrictions. At the moment, there is no information about a newer version that contains a fix for this vulnerability.