Your Ad Here

Friday, September 11, 2009

Microsoft Internet Explorer Cookie Session Fixation

Microsoft Internet Explorer Cookie Session Fixation

Description:

A vulnerability is present in Microsoft Internet Explorer that may allow for sensitive information disclosure.

Recommendation:

Securityorb.com is not aware of a vendor supplied patch/update at this time.

Observation:

Microsoft Internet Explorer is an industry standard Web browsing application.

A vulnerability exists in Microsoft Internet Explorer that may allow for sensitive information disclosure. Web sites with special domain names can set cookies and hijack HTTP sessions. A user would have to visit a malicious Web site for an attack to occur.

Common Vulnerabilities & Exposures (CVE) Link:

CVE-2008-3173

IAVA Reference Number

IAVA-REF-NUMBER-NOMATCH

No comments: