Security Advisory

CVE-2010-0494

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2010-03-31 19:00:00

Last updated 2024-08-07 00:52:18

Assigner microsoft

CVSS score not scored

State PUBLISHED

Description

Cross-domain vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted HTML document in a situation where the client user drags one browser window across another browser window, aka "HTML Element Cross-Domain Vulnerability."

← Browse all CVEs View on cve.org ↗