CVE-2008-5556
Microsoft Internet Explorer 8.0 Beta 2 - XSS
Title source: llmDescription
The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not recognize attack patterns designed to operate against web pages that are encoded with utf-7, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting crafted utf-7 content. NOTE: the vendor reportedly disputes this issue, stating "Behaviour is by design.
Scores
EPSS
0.1111
EPSS Percentile
93.4%
Classification
CWE
CWE-79
Status
published
Affected Products (2)
microsoft/internet_explorer
n/a/n/a
Timeline
Published
Dec 12, 2008
Tracked Since
Feb 18, 2026