CVE-2010-3324

The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010, Office SharePoint Server 2007 SP2, Groove Server 2010, and Office Web Apps, allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and conduct XSS attacks via a crafted use of the Cascading Style Sheets (CSS) @import rule, aka "HTML Sanitization Vulnerability," a different vulnerability than CVE-2010-1257.

CVSS v2.0 4.3 MEDIUM

4.3^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability : 8.6 / Impact : 2.9

Access Vector NETWORK

Access Complexity MEDIUM

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0179.html	Exploit
http://www.wooyun.org/bug.php?action=view&id=189	Exploit
http://support.avaya.com/css/P8/documents/100113324
http://www.us-cert.gov/cas/techalerts/TA10-285A.html	US Government Resource
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7297
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-072
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:microsoft:internet_explorer:8:::::::*
	cpe:2.3:a:microsoft:sharepoint_services:3.0:sp2:x32:::::*
	cpe:2.3:a:microsoft:groove_server:2010:::::::*
	cpe:2.3:a:microsoft:web_apps::::::::
	cpe:2.3:a:microsoft:sharepoint_foundation:2010:::::::*
	cpe:2.3:a:microsoft:sharepoint_server:2007:sp2::::::

Information

Published : 2010-09-17 11:00

Updated : 2021-07-23 08:12

NVD link : CVE-2010-3324

Mitre link : CVE-2010-3324

JSON object : View

CWE

CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Advertisement

Products Affected

microsoft

groove_server
web_apps
sharepoint_foundation
sharepoint_services
sharepoint_server
internet_explorer

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://archives.neohapsis.com/archives/fulldisclosure/2010-08/0179.html", "name": "20100814 IE8 toStaticHtml Bypass", "tags": ["Exploit"], "refsource": "FULLDISC"}, {"url": "http://www.wooyun.org/bug.php?action=view&id=189", "name": "http://www.wooyun.org/bug.php?action=view&id=189", "tags": ["Exploit"], "refsource": "MISC"}, {"url": "http://support.avaya.com/css/P8/documents/100113324", "name": "http://support.avaya.com/css/P8/documents/100113324", "tags": [], "refsource": "CONFIRM"}, {"url": "http://www.us-cert.gov/cas/techalerts/TA10-285A.html", "name": "TA10-285A", "tags": ["US Government Resource"], "refsource": "CERT"}, {"url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7297", "name": "oval:org.mitre.oval:def:7297", "tags": [], "refsource": "OVAL"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-072", "name": "MS10-072", "tags": [], "refsource": "MS"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2010/ms10-071", "name": "MS10-071", "tags": [], "refsource": "MS"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010, Office SharePoint Server 2007 SP2, Groove Server 2010, and Office Web Apps, allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and conduct XSS attacks via a crafted use of the Cascading Style Sheets (CSS) @import rule, aka \"HTML Sanitization Vulnerability,\" a different vulnerability than CVE-2010-1257."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-79"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2010-3324", "ASSIGNER": "secure@microsoft.com"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "severity": "MEDIUM", "impactScore": 2.9, "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}}, "publishedDate": "2010-09-17T18:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:microsoft:sharepoint_services:3.0:sp2:x32:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:microsoft:groove_server:2010:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:microsoft:web_apps:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:microsoft:sharepoint_foundation:2010:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2021-07-23T15:12Z"}