Description
Cross-domain vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted HTML document in a situation where the client user drags one browser window across another browser window, aka "HTML Element Cross-Domain Vulnerability."
References
- TA10-089A third-party-advisory
- 39047 vdb-entry
- TA10-068A third-party-advisory
- MS10-018 vendor-advisory
- oval:org.mitre.oval:def:8553 vdb-entry signature
- ADV-2010-0744 vdb-entry
- 1023773 vdb-entry