CVE-2005-4827: High severity Microsoft ie vulnerability
Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outside of the intended domain by calling open on an XMLHttpRequest object (Microsoft.XMLHTTP) and using tab, newline, and carriage return characters within the first argument (method name), which is supported by some proxy servers that convert tabs to spaces. NOTE: this issue can be leveraged to conduct referer spoofing, HTTP Request Smuggling, and other attacks.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2005-4827?
CVE-2005-4827 is rated as a high severity vulnerability that allows attackers to bypass the same origin security policy in Internet Explorer.
How do I fix CVE-2005-4827?
To fix CVE-2005-4827, users should update their Internet Explorer to the latest version provided by Microsoft.
What versions of Internet Explorer are affected by CVE-2005-4827?
CVE-2005-4827 affects Internet Explorer versions 6.0 and may also impact earlier versions.
What kind of attacks can exploit CVE-2005-4827?
CVE-2005-4827 can be exploited by remote attackers to make requests to unauthorized domains using XMLHttpRequest objects.
Is there a workaround for CVE-2005-4827 if I can’t update?
As a temporary workaround for CVE-2005-4827, users can disable JavaScript or use different web browsers until an update is applied.