Description
Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, and 7 does not properly handle unspecified "encoding strings," which allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site, aka "Post Encoding Information Disclosure Vulnerability."
References
- JVN#49467403 third-party-advisory
- TA10-089A third-party-advisory
- 39028 vdb-entry
- TA10-068A third-party-advisory
- MS10-018 vendor-advisory
- JVNDB-2010-000011 third-party-advisory
- ADV-2010-0744 vdb-entry
- 1023773 vdb-entry
- oval:org.mitre.oval:def:7840 vdb-entry signature