Description
Microsoft Internet Explorer 6 and 7 on Windows XP and Vista does not prevent script from simulating user interaction with the AutoComplete feature, which allows remote attackers to obtain sensitive form information via a crafted web site, aka "AutoComplete Information Disclosure Vulnerability."
References
- MS10-071 vendor-advisory
- oval:org.mitre.oval:def:6889 vdb-entry signature
- http://support.avaya.com/css/P8/documents/100113324