CVE-2008-5553

Microsoft Internet Explorer 8.0 Beta 2 - XSS

Title source: llm

Description

The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 disables itself upon encountering a certain X-XSS-Protection HTTP header, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting this header after a CRLF sequence. NOTE: the vendor has reportedly stated that the XSS Filter intentionally does not attempt to "address every conceivable XSS attack scenario."

References (3)

Scores

EPSS 0.1369
EPSS Percentile 94.1%

Classification

CWE
CWE-79
Status published

Affected Products (2)

microsoft/internet_explorer
n/a/n/a

Timeline

Published Dec 12, 2008
Tracked Since Feb 18, 2026