CVE-2008-2281 Cross-zone scripting vulnerability in the Print Table of Links feature in Internet Explorer 6.0, 7.0, and 8.0b allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local...
HighCVSS 9.3
EPSS 23.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-zone scripting vulnerability in the Print Table of Links feature in Internet Explorer 6.0, 7.0, and 8.0b allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via an HTML document with a link containing JavaScript sequences, which are evaluated by a resource script when a user prints this document.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft ie | = 8.0b | No fix listed |
| Microsoft internet explorer | = 6.0 | No fix listed |
| Microsoft internet explorer | = 7.0 | No fix listed |
References
- aviv.raffon.net exploit
- 30141 third-party-advisory vendor-advisory
- 29217 vdb-entry
- ADV-2008-1529 vdb-entry
- ie-printtableoflinks-code-execution(42416) vdb-entry
- 5619 exploit