HTTP: Internet Explorer JavaScript Method Assignment Cross-Domain Scripting

This signature detects attempts to exploit a known vulnerability against JavaScript. Maliciously crafted downloaded HTML documents containing the "location.assign" JavaScript function, can force Internet Explorer into executing potentially harmful JavaScript in a trusted security zone.

Extended Description

A vulnerability exists in Microsoft Internet Explorer that may allow cross-domain/cross-zone scripting. It is reported that the vulnerability presents itself due to a failure to properly validate trust relationships between method calls that are made in separate Internet Explorer windows. This may make it possible for script code to access properties of a foreign domain or Security Zone. Exploitation may permit execution of arbitrary code as the victim user.

Affected Products

Avaya s8100_media_servers,Microsoft internet_explorer

References

BugTraq: 10689

CVE: CVE-2004-0727

URL: http://www.securityfocus.com/archive/1/369167 http://www.microsoft.com/technet/security/bulletin/ms04-038.mspx http://www.us-cert.gov/cas/techalerts/TA04-293A.html

Short Name

HTTP:STC:IE:JS-LOCATION-ASSIGN

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Internet Explorer JavaScript Method Assignment Cross-Domain Scripting

Extended Description

Affected Products

References

Found a potential security threat?