4724Third-party advisory
http://securityreason.com/securityalert/4724 CVE-2008-5551
Microsoft Internet Explorer 8 - CSS 'expression' Property Cross-Site Scripting Filter Bypass
Record summary
CVE-2008-5551 has a selected CVSS score of 4.3; EIP currently links 1 catalogued exploit.
Description
The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting data at two different positions within an HTML document, related to STYLE elements and the CSS expression property, aka a "double injection."
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBMicrosoft Internet Explorer 8 - CSS 'expression' Property Cross-Site Scripting Filter BypassExploitDB exploitby Rafel IvgiNot analyzed1 file
References
520081211 Aspect9: Internet Explorer 8.0 Beta 2 Anti-XSS Filter Vulnerabilitiesmailing list
http://www.securityfocus.com/archive/1/499124/100/0/threaded 32780vdb entry
http://www.securityfocus.com/bid/32780 ie-antixss-xss(47277)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/47277 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2008-5551