NVD

Id
7229  
Name
CVE-2011-0096  
Description
The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content blocks in a document, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site that is visited in Internet Explorer, aka "MHTML Mime-Formatted Request Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-07  
Published
2011-01-31  
Modified Date
2011-10-04  
Seq
2011-0096  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
40693 7229 CVE-2011-0096 http://blogs.technet.com/b/msrc/archive/2011/01/28/microsoft-releases-security-advisory-2501696.aspx  View
40694 7229 CVE-2011-0096 http://blogs.technet.com/b/srd/archive/2011/01/28/more-information-about-the-mhtml-script-injection-vulnerability.aspx  View
40695 7229 CVE-2011-0096 oval:org.mitre.oval:def:6956  View
40696 7229 CVE-2011-0096 http://www.80vul.com/webzine_0x05/0x05%20IE%E4%B8%8BMHTML%E5%8D%8F%E8%AE%AE%E5%B8%A6%E6%9D%A5%E7%9A%84%E8%B7%A8%E5%9F%9F%E5%8D%B1%E5%AE%B3.html  View
40697 7229 CVE-2011-0096 16071  View
40698 7229 CVE-2011-0096 VU#326549  View
40699 7229 CVE-2011-0096 http://www.microsoft.com/technet/security/advisory/2501696.mspx  View
40700 7229 CVE-2011-0096 MS11-026  View
40701 7229 CVE-2011-0096 46055  View
40702 7229 CVE-2011-0096 1025003  View
40703 7229 CVE-2011-0096 TA11-102A  View
40704 7229 CVE-2011-0096 ADV-2011-0242  View
40705 7229 CVE-2011-0096 ms-win-mhtml-info-disclosure(65000)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30904 JVNDB-2011-001143 Microsoft Windows にスクリプトインジェクションの脆弱性 Microsoft Windows の MHTML プロトコルハンドラには、スクリプトインジェクションの脆弱性が存在します。 CVE-2011-0096 48003 CVE-2011-0096 7229 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001143.html 2011-01-31 2011-04-28 View