CVE-2008-4033
N/A
N/A
Summary
Cross-domain vulnerability in Microsoft XML Core Services 3.0 through 6.0, as used in Microsoft Expression Web, Office, Internet Explorer, and other products, allows remote attackers to obtain sensitive information from another domain and corrupt the session state via HTTP request header fields, as demonstrated by the Transfer-Encoding field, aka "MSXML Header Request Vulnerability."
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://marc.info/?l=bugtraq&m=122703006921213&w=2
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5847
- http://www.us-cert.gov/cas/techalerts/TA08-316A.html
- http://marc.info/?l=bugtraq&m=122703006921213&w=2
- http://www.vupen.com/english/advisories/2008/3111
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-069
- http://securitytracker.com/id?1021164
- http://www.securityfocus.com/bid/32204
References
- http://marc.info/?l=bugtraq&m=122703006921213&w=2
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5847
- http://www.us-cert.gov/cas/techalerts/TA08-316A.html
- http://marc.info/?l=bugtraq&m=122703006921213&w=2
- http://www.vupen.com/english/advisories/2008/3111
- https://docs.microsoft.com/en-us/security-updates/securitybulletins/2008/ms08-069
- http://securitytracker.com/id?1021164
- http://www.securityfocus.com/bid/32204
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.