CVE

Id
53250  
CVE No.
CVE-2012-0007  
Status
Candidate  
Description
The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascading Style Sheets (CSS) escaped character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML input, aka "AntiXSS Library Bypass Vulnerability."  
Phase
Assigned (20111109)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
562688 53250 CVE-2012-0007 MS:MS12-007  View
562689 53250 CVE-2012-0007 URL:http://technet.microsoft.com/security/bulletin/MS12-007  View
562690 53250 CVE-2012-0007 CERT:TA12-010A  View
562691 53250 CVE-2012-0007 URL:http://www.us-cert.gov/cas/techalerts/TA12-010A.html  View
562692 53250 CVE-2012-0007 BID:51291  View
562693 53250 CVE-2012-0007 URL:http://www.securityfocus.com/bid/51291  View
562694 53250 CVE-2012-0007 OVAL:oval:org.mitre.oval:def:14314  View
562695 53250 CVE-2012-0007 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:14314  View
562696 53250 CVE-2012-0007 SECTRACK:1026499  View
562697 53250 CVE-2012-0007 URL:http://www.securitytracker.com/id?1026499  View
562698 53250 CVE-2012-0007 SECUNIA:47483  View
562699 53250 CVE-2012-0007 URL:http://secunia.com/advisories/47483  View
562700 53250 CVE-2012-0007 SECUNIA:47516  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25725 JVNDB-2012-001432 Microsoft Internet Explorer 9 におけるデータを読まれる脆弱性 Microsoft Internet Explorer 9 は、string オブジェクトの生成および初期化を適切に処理しないため、任意のプロセスメモリロケーションからデータを読まれる脆弱性が存在します。 CVE-2012-0012 53250 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001432.html  View