HTTP: Microsoft Internet Explorer Event Handlers Information Disclosure Vulnerability

This signature detects attempts to exploit a known vulnerability in Microsoft Internet Explorer. An attacker can create a malicious Web site with Web pages containing dangerous scripts, which if accessed by a victim, allows the attacker to gain access to potentially sensitive information without the victim's knowledge.

Extended Description

Microsoft Internet Explorer is prone to a cross-domain information-disclosure vulnerability. An attacker can exploit this issue to access local files or content from a browser window in another domain or security zone. This may allow the attacker to obtain sensitive information that may aid in further attacks.

Affected Products

Avaya messaging_application_server,Avaya meeting_exchange

References

BugTraq: 49023

CVE: CVE-2011-1960

Short Name

HTTP:STC:IE:EVENT-HANDLER-INFO

Severity

Minor

Recommended

False

Recommended Action

Drop

HTTP: Microsoft Internet Explorer Event Handlers Information Disclosure Vulnerability

Extended Description

Affected Products

References

Found a potential security threat?