NVD

Id
69727  
Name
CVE-2005-4089  
Description
Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive to download files from other domains that are not valid Cascading Style Sheets (CSS) files, as demonstrated using Google Desktop, aka "CSSXSS" and "CSS Cross-Domain Information Disclosure Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
7.1  
Severity
High  
CVSS Base Score
7.1  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:N/A:N)  
Pub Date
2017-01-03  
Published
2005-12-08  
Modified Date
2011-09-27  
Seq
2005-4089  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
360297 69727 CVE-2005-4089 oval:org.mitre.oval:def:1556  View
360298 69727 CVE-2005-4089 oval:org.mitre.oval:def:1800  View
360299 69727 CVE-2005-4089 oval:org.mitre.oval:def:1838  View
360300 69727 CVE-2005-4089 oval:org.mitre.oval:def:1914  View
360301 69727 CVE-2005-4089 oval:org.mitre.oval:def:1977  View
360302 69727 CVE-2005-4089 oval:org.mitre.oval:def:1985  View
360303 69727 CVE-2005-4089 1016291  View
360304 69727 CVE-2005-4089 http://www.hacker.co.il/security/ie/css_import.html  View
360305 69727 CVE-2005-4089 MS06-021  View
360306 69727 CVE-2005-4089 15660  View
360307 69727 CVE-2005-4089 ADV-2005-2804  View
360308 69727 CVE-2005-4089 ADV-2006-2319  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62509 JVNDB-2005-000711 Microsoft Internet Explorer における JavaScript による情報漏洩の脆弱性 Microsoft Internet Explorer には、@import を使用して異なるドメインの Web コンテンツを読み込んだ際に、スタイルシートの書式でない Web コンテンツの内容が CSS として解釈されてしまうため、JavaScript により Web コンテンツの内容を読み出される脆弱性が存在します。 CVE-2005-4089 15291 CVE-2005-4089 69727 7.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000711.html 2005-11-30 2007-04-01 View