Skip to content
OpenAdvisories
Unscored CVE-2011-4689 EUVD-2011-4607GHSA-vg75-g6fc-cfrr

Microsoft Internet Explorer 6 through 9 does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loa…

Published Dec 7, 2011 · Updated Sep 16, 2024 · Assigned by mitre

Description

Microsoft Internet Explorer 6 through 9 does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code.

References