CVE-2008-4029 Cross-domain vulnerability in Microsoft XML Core Services 3.0 and 4.0, as used in Internet Explorer, allows remote attackers to obtain sensitive information from another domain via a crafted XML docum...
MediumCVSS 4.3
EPSS 26.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Cross-domain vulnerability in Microsoft XML Core Services 3.0 and 4.0, as used in Internet Explorer, allows remote attackers to obtain sensitive information from another domain via a crafted XML document, related to improper error checks for external DTDs, aka "MSXML DTD Cross-Domain Scripting Vulnerability."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | All versions | No fix listed |
References
- SSRT080164 vendor-advisory
- 1021164 vdb-entry
- 32155 patch vdb-entry
- TA08-316A third-party-advisory us-government-resource
- ADV-2008-3111 vdb-entry
- MS08-069 vendor-advisory
- oval:org.mitre.oval:def:5999 signature vdb-entry