HTTP: Microsoft Internet Explorer DesignMode Information Disclosure

This signature detects attempts to exploit a known vulnerability against Microsoft Internet Explorer. Attackers can create malicious Web Sites containing hostile Web pages, which if accessed by users, allows the attacker to gather the victim's personal and business information.

Extended Description

Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability because the application fails to properly enforce the same-origin policy. An attacker can exploit this issue to access local files or content from a browser window in another domain or security zone. This may allow the attacker to obtain sensitive information or may aid in further attacks.

Affected Products

Avaya messaging_application_server,Avaya meeting_exchange-webportal

Short Name
HTTP:STC:IE:DESIGNMODE-INFO
Severity
Warning
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
CVE-2010-0494 DesignMode Disclosure Explorer Information Internet Microsoft bid:39047
Release Date
03/30/2010
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3339
False Positive
Unknown
Vendors

Avaya

Microsoft

CVSS Score

4.3

Found a potential security threat?