CVE

Id
49164  
CVE No.
CVE-2011-1252  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in the SafeHTML function in the toStaticHTML API in Microsoft Internet Explorer 7 and 8, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified strings, aka "toStaticHTML Information Disclosure Vulnerability" or "HTML Sanitization Vulnerability."  
Phase
Assigned (20110304)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
534592 49164 CVE-2011-1252 MS:MS11-050  View
534593 49164 CVE-2011-1252 URL:http://www.microsoft.com/technet/security/Bulletin/MS11-050.mspx  View
534594 49164 CVE-2011-1252 MS:MS11-074  View
534595 49164 CVE-2011-1252 URL:http://technet.microsoft.com/en-us/security/bulletin/MS11-074  View
534596 49164 CVE-2011-1252 CERT:TA11-256A  View
534597 49164 CVE-2011-1252 URL:http://www.us-cert.gov/cas/techalerts/TA11-256A.html  View
534598 49164 CVE-2011-1252 OVAL:oval:org.mitre.oval:def:12577  View
534599 49164 CVE-2011-1252 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:12577  View
534600 49164 CVE-2011-1252 OVAL:oval:org.mitre.oval:def:12885  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31887 JVNDB-2011-002127 Microsoft Internet Explorer 6 から 8 における任意のコードを実行される脆弱性 Microsoft Internet Explorer 6 から 8 には、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態となる脆弱性が存在します。 CVE-2011-1257 49164 7.6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002127.html  View