CVE

Id
77335  
CVE No.
CVE-2015-0072  
Status
Candidate  
Description
Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 9 through 11 allows remote attackers to bypass the Same Origin Policy and inject arbitrary web script or HTML via vectors involving an IFRAME element that triggers a redirect, a second IFRAME element that does not trigger a redirect, and an eval of a WindowProxy object, aka "Universal XSS (UXSS)."  
Phase
Assigned (20141118)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
708073 77335 CVE-2015-0072 BUGTRAQ:20150209 Cookie hijacking: Internet Explorer UXSS (CVE-2015-0072)  View
708074 77335 CVE-2015-0072 URL:http://www.securityfocus.com/archive/1/archive/1/534662/100/0/threaded  View
708075 77335 CVE-2015-0072 FULLDISC:20150131 Major Internet Explorer Vulnerability - NOT Patched  View
708076 77335 CVE-2015-0072 URL:http://seclists.org/fulldisclosure/2015/Feb/0  View
708077 77335 CVE-2015-0072 MISC:http://community.websense.com/blogs/securitylabs/archive/2015/02/05/another-day-another-zero-day-internet-explorer-s-turn-cve-2015-0072.aspx  View
708078 77335 CVE-2015-0072 MISC:http://innerht.ml/blog/ie-uxss.html  View
708079 77335 CVE-2015-0072 MISC:http://packetstormsecurity.com/files/130308/Microsoft-Internet-Explorer-Universal-XSS-Proof-Of-Concept.html  View
708080 77335 CVE-2015-0072 MISC:http://www.pcworld.com/article/2879372/dangerous-ie-vulnerability-opens-door-to-powerful-phishing-attacks.html  View
708081 77335 CVE-2015-0072 MISC:https://nakedsecurity.sophos.com/2015/02/04/internet-explorer-has-a-cross-site-scripting-zero-day-bug/  View
708082 77335 CVE-2015-0072 MS:MS15-018  View
708083 77335 CVE-2015-0072 URL:http://technet.microsoft.com/security/bulletin/MS15-018  View
708084 77335 CVE-2015-0072 BID:72489  View
708085 77335 CVE-2015-0072 URL:http://www.securityfocus.com/bid/72489  View
708086 77335 CVE-2015-0072 SECTRACK:1031888  View
708087 77335 CVE-2015-0072 URL:http://www.securitytracker.com/id/1031888  View
708088 77335 CVE-2015-0072 SECUNIA:62658  View
708089 77335 CVE-2015-0072 URL:http://secunia.com/advisories/62658  View
708090 77335 CVE-2015-0072 XF:ms-ie-cve20150072-xss(100606)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
6523 JVNDB-2015-001843 IBM Rational Quality Manager におけるクロスサイトスクリプティングの脆弱性 IBM Rational Quality Manager には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-0124 77335 3.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001843.html  View