HTTP: Internet Explorer Cross Frame Scripting Restriction Bypass

This signature detects attempts to exploit a known vulnerability in Microsoft Internet Explorer (IE). Remote attackers can create a malicious Web site that bypasses the restrictions imposed on cross frame scripting. Within this site, the attacker places JavaScript outside the defined frameset within the parent HTML and forces the target frameset to maintain focus. Attackers can use this exploit to execute arbitrary code on a target system.

Extended Description

Remote attackers could bypass cross-frame security restrictions and obtain sensitive information.

References

URL: http://support.microsoft.com/support/kb/articles/Q167/7/96.asp http://www.idefense.com/application/poi/display?id=77&type=vulnerabilities&flashstatus=true

Short Name

HTTP:STC:IE:CROSS-FRAME-SCRIPT

Severity

Major

Recommended

False

Recommended Action

None

HTTP: Internet Explorer Cross Frame Scripting Restriction Bypass

Extended Description

References

Found a potential security threat?