| Revision Date: | 2014-08-18 | Version: | 50 | | Title: | Cross-Domain Information Disclosure Vulnerability | | Description: | Microsoft Internet Explorer 6 through 8 does not properly restrict script access to content from a different (1) domain or (2) zone, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Cross-Domain Information Disclosure Vulnerability." | | Family: | windows | Class: | vulnerability | | Status: | ACCEPTED | Reference(s): | CVE-2010-3330
| | Platform(s): | Microsoft Windows 7
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Vista
Microsoft Windows XP
| Product(s): | Microsoft Internet Explorer 6
Microsoft Internet Explorer 7
Microsoft Internet Explorer 8
| | Definition Synopsis | | Internet Explorer 6 on XP x86 Microsoft Windows XP (32-bit) is installed
AND Microsoft Internet Explorer 6 is installed
AND Mshtml.dll version is less than 6.0.2900.6036
OR Internet Explorer 6 on XP x64, Server 2003 x86/x64/ia64
XP x64/server 2003 x86/x64/ia64
Microsoft Windows XP x64 is installed
OR Microsoft Windows Server 2003 (32-bit) is installed
OR Microsoft Windows Server 2003 (x64) is installed
OR Microsoft Windows Server 2003 (ia64) Gold is installed
AND Microsoft Internet Explorer 6 is installed
AND Mshtml.dll version is less than 6.0.3790.4772
OR Internet Explorer 7 on XP x86/x64, Server 2003 x86/x64/ia64
XP x86/x64, Server 2003 x86/x64/ia64
Microsoft Windows XP (32-bit) is installed
OR Microsoft Windows XP x64 is installed
OR Microsoft Windows Server 2003 (32-bit) is installed
OR Microsoft Windows Server 2003 (x64) is installed
OR Microsoft Windows Server 2003 (ia64) Gold is installed
AND Microsoft Internet Explorer 7 is installed
AND GDR or QFE Service branch
Mshtml.dll version is less than 7.0.6000.17092
OR QFE
Mshtml.dll version is greater than 7.0.6000.20000
AND Mshtml.dll version is less than 7.0.6000.21294
OR Internet Explorer 7 on Vista x86/x64, Server 2008 x86/x64/ia64
Vista x86/x64, Server 2008 x86/x64/ia64
Microsoft Windows Vista (32-bit) is installed
OR Microsoft Windows Vista x64 Edition is installed
OR Microsoft Windows Server 2008 (32-bit) is installed
OR Microsoft Windows Server 2008 (64-bit) is installed
OR Microsoft Windows Server 2008 (ia-64) is installed
AND Microsoft Internet Explorer 7 is installed
AND GDR or LDR Service branch
Mshtml.dll version is less than 7.0.6001.18527
OR LDR
Mshtml.dll version is greater than 7.0.6001.20000
AND Mshtml.dll version is less than 7.0.6001.22760
OR Internet Explorer 7 on Vista x86/x64, Server 2008 x86/x64/ia64
Vista x86/x64, Server 2008 x86/x64/ia64
Microsoft Windows Vista (32-bit) is installed
OR Microsoft Windows Vista x64 Edition is installed
OR Microsoft Windows Server 2008 (32-bit) is installed
OR Microsoft Windows Server 2008 (64-bit) is installed
OR Microsoft Windows Server 2008 (ia-64) is installed
AND Microsoft Internet Explorer 7 is installed
AND GDR or LDR Service branch
Mshtml.dll version is less than 7.0.6002.18309
OR LDR
Mshtml.dll version is greater than 7.0.6002.22000
AND Mshtml.dll version is less than 7.0.6002.22484
OR Internet Explorer 8 on XP x64/x86, Server 2003 x86/x64/ia64
XP x86/x64, Server 2003 x86/x64
Microsoft Windows XP (32-bit) is installed
OR Microsoft Windows XP x64 is installed
OR Microsoft Windows Server 2003 (32-bit) is installed
OR Microsoft Windows Server 2003 (x64) is installed
AND Microsoft Internet Explorer 8 is installed
AND GDR or QFE Service branch
Mshtml.dll version is less than 8.0.6001.18975
OR QFE
Mshtml.dll version is greater than 8.0.6001.22000
AND Mshtml.dll version is less than 8.0.6001.23067
OR Internet Explorer 8 on all Vista x86/x64, all Server 2008 x86/x64
Vista x86/x64, Server 2008 x86/x64
Microsoft Windows Vista (32-bit) is installed
OR Microsoft Windows Vista x64 Edition is installed
OR Microsoft Windows Server 2008 (32-bit) is installed
OR Microsoft Windows Server 2008 (64-bit) is installed
AND Microsoft Internet Explorer 8 is installed
AND GDR or LDR Service branch
Mshtml.dll version is less than 8.0.6001.18975
OR LDR
Mshtml.dll version is greater than 8.0.6001.22000
AND Mshtml.dll version is less than 8.0.6001.23067
OR Internet Explorer 8 on Windows 7 x86/x64, Server 2008 R2 x64/ia64
7 x86/x64, Server 2008 R2 x64/ia64
Microsoft Windows 7 (32-bit) is installed
OR Microsoft Windows 7 x64 Edition is installed
OR Microsoft Windows Server 2008 R2 x64 Edition is installed
OR Microsoft Windows Server 2008 R2 Itanium-Based Edition is installed
AND Microsoft Internet Explorer 8 is installed
AND GDR or LDR Service branch
Mshtml.dll version is less than 8.0.7600.16671
OR LDR
Mshtml.dll version is greater than or equal 8.0.7600.20000
AND Mshtml.dll version is less than 8.0.7600.20795
|
|