Description
Cross-site scripting (XSS) in Internet Explorer 5.5 and 6.0, possibly in a component that is also used by other Microsoft products, allows remote attackers to insert arbitrary web script via an XML file that contains a parse error, which inserts the script in the resulting error message.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/12334 ↗
- http://marc.info/?l=bugtraq&m=105595990924165&w=2 ↗
- http://www.osvdb.org/3065 ↗
- http://archives.neohapsis.com/archives/bugtraq/2003-06/0120.html ↗
- http://lists.grok.org.uk/pipermail/full-disclosure/2003-June/005762.html ↗
- http://marc.info/?l=ntbugtraq&m=105585001905002&w=2 ↗
- http://www.securityfocus.com/bid/7938 ↗
- http://secunia.com/advisories/9055 ↗
- http://security.greymagic.com/adv/gm013-ie/ ↗
- http://marc.info/?l=bugtraq&m=105585986015421&w=2 ↗