Security Advisories | Internet Explorer Charset Inheritance Cross Site Scripting Vulnerability

Security Advisory

Internet Explorer Charset Inheritance Cross-Site Scripting Vulnerability Reported Date: 12-07-09

Rated Level: Low

Impact: Cross Scripting,Remotely Exploitable

Affected Software: Microsoft Internet Explorer 7.x
Microsoft Internet Explorer 8.x

Description: Stefan Esser has discovered a vulnerability in Internet Explorer, which can be exploited by malicious people to conduct cross-site scripting attacks.

The vulnerability exists because pages that don't specify a charset inherit the charset of the parent page. This can be exploited to execute arbitrary HTML and script code in a user's browser session in context of certain sites that are included e.g. via iframes in a malicious page that uses UTF-7 as charset.

Successful exploitation requires that the user is tricked into visiting a malicious web site.

The vulnerability is confirmed in Internet Explorer 7 and 8 on a fully patched Windows XP. Other versions may also be affected.

Note: Stefan Esser. Additional information related to Internet Explorer 8 provided by Inferno.

Solution: Do not browse untrusted sites.

Original Advisory: Stefan Esser:
http://www.hardened-php.net/advisory_032007.142.html

Inferno:
http://securethoughts.com/2009/05/exp...ulnerability-using-local-redirection/

References: http://secunia.com/advisories/cve_reference/CVE-2007-0995/
http://secunia.com/advisories/cve_reference/CVE-2007-1114/

Feedback: If you have additional information or corrections for this security advisory please contact us at advisory(at)triviasecurity.org

Security Advisories by Month (2010)

Jul (3) Apr (5) Mar (3) Jan (8)

TS Promotion

Latest Exploit Codes