Microsoft IE MSXML DTD Cross domain Scripting Vulnerability

Overview

» IDS/IPS Signatures

Security Sites

iPolicy Networks Security Advisory


Date Discovered:	11/11/2008
Severity:	High
Applications Affected:	Microsoft Internet Explorer 4 Microsoft Internet Explorer 5 Microsoft Internet Explorer 6

Synopsis

Microsoft Internet Explorer is prone to a cross domain vulnerability because Microsoft XML Core Services handles error checks for external document type definitions (DTDs).

Recommended Actions

Update the patches as guided by vendor at :
http://www.microsoft.com/technet/security/bulletin/ms08-069.mspx

Threat Analysis

MSXML incorrectly handles external DTDs, allowing a violation of cross-domain policy. The vulnerability could allow information disclosure if a user browses a Web site that contains specially crafted content or opens specially crafted HTML e-mail.

An attacker who successfully exploited this vulnerability could read data from a Web page in another domain in Internet Explorer.

References

http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4029

Write-up by: Aditya Chaturvedi

Security Sites

“iPolicy is one of the most visionary firewall vendors in the firewall Magic Quadrant. Its architecture of a central session processing engine and multiple content blades that are able to block based on signatures, rules and so on is the closest to the network security ideal.”

Greg Young, John Pescatore
Magic Quadrant for Network Firewalls, 2H04, Gartner

| | | | | | | | |