Microsoft Internet Explorer 6 through 9 does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code.
References
Link | Resource |
---|---|
http://lcamtuf.coredump.cx/cachetime/ | Exploit |
http://secunia.com/advisories/47129 | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2011-12-07 11:55
Updated : 2021-07-23 08:12
NVD link : CVE-2011-4689
Mitre link : CVE-2011-4689
JSON object : View
CWE
CWE-264
Permissions, Privileges, and Access Controls
Products Affected
microsoft
- internet_explorer