Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2010-0494

Cross-domain vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted HTML document in a situation where the client user drags one browser window across another browser window, aka "HTML Element Cross-Domain Vulnerability."

Published

2010-03-31T19:30:00.547

Last Modified

2025-04-11T00:51:21.963

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 4.3 (MEDIUM)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: PARTIAL
  • Integrity Impact: NONE
  • Availability Impact: NONE
Exploitability Score

8.6

Impact Score

2.9

Weaknesses
  • Type: Primary
    CWE-200
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application microsoft internet_explorer 7 Yes
Operating System microsoft windows_2003_server * Yes
Operating System microsoft windows_server_2003 * Yes
Operating System microsoft windows_xp * Yes
Operating System microsoft windows_xp * Yes
Operating System microsoft windows_xp - Yes
Application microsoft internet_explorer 7 Yes
Operating System microsoft windows_server_2008 * Yes
Operating System microsoft windows_server_2008 * Yes
Operating System microsoft windows_server_2008 * Yes
Operating System microsoft windows_server_2008 * Yes
Operating System microsoft windows_server_2008 - Yes
Operating System microsoft windows_server_2008 - Yes
Operating System microsoft windows_vista * Yes
Operating System microsoft windows_vista * Yes
Operating System microsoft windows_vista * Yes
Operating System microsoft windows_vista * Yes
Operating System microsoft windows_vista - Yes
Operating System microsoft windows_vista - Yes
Application microsoft internet_explorer 6 Yes
Operating System microsoft windows_server_2003 * Yes
Operating System microsoft windows_xp * Yes
Operating System microsoft windows_xp * Yes
Operating System microsoft windows_xp - Yes
Application microsoft internet_explorer 8 Yes
Application microsoft internet_explorer 8.0.6001 Yes
Operating System microsoft windows_2003_server * Yes
Operating System microsoft windows_2003_server * Yes
Operating System microsoft windows_7 - Yes
Operating System microsoft windows_server_2003 * Yes
Operating System microsoft windows_server_2008 * Yes
Operating System microsoft windows_server_2008 * Yes
Operating System microsoft windows_server_2008 * Yes
Operating System microsoft windows_server_2008 * Yes
Operating System microsoft windows_vista * Yes
Operating System microsoft windows_vista * Yes
Operating System microsoft windows_vista * Yes
Operating System microsoft windows_vista * Yes
Operating System microsoft windows_vista - Yes
Operating System microsoft windows_vista - Yes
Operating System microsoft windows_xp * Yes
Operating System microsoft windows_xp * Yes
Operating System microsoft windows_xp - Yes
Application microsoft internet_explorer 6 Yes
Operating System microsoft windows_2000 * Yes
References