← Database

CVE-2010-1258

MEDIUM CVSS: 4.3 Published: 2010-08-11 Modified: 2026-06-16

Description

Microsoft Internet Explorer 6, 7, and 8 does not properly determine the origin of script code, which allows remote attackers to execute script in an unintended domain or security zone, and obtain sensitive information, via unspecified vectors, aka "Event Handler Cross-Domain Vulnerability."

Affected Platforms

Microsoft Internet ExplorerMicrosoft Windows 7Microsoft Windows XpMicrosoft Windows Server 2008Microsoft Windows Server 2003Microsoft Windows VistaMicrosoft Windows 2003 Server

Weakness Type

CWE-200

References