CVE-2008-2281: Critical severity microsoft internet explorer vulnerability

Published May 18, 2008

Updated

Cross-zone scripting vulnerability in the Print Table of Links feature in Internet Explorer 6.0, 7.0, and 8.0b allows user-assisted remote attackers to inject arbitrary web script or HTML in the Local Machine Zone via an HTML document with a link containing JavaScript sequences, which are evaluated by a resource script when a user prints this document.

Affected Software

3 affected components

Microsoft ie=8.0b

Microsoft Internet Explorer=6.0

Microsoft Internet Explorer=7.0

Event History

May 18, 2008

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-2281?

CVE-2008-2281 is rated as a medium severity vulnerability due to the potential for user-assisted exploitation.

How do I fix CVE-2008-2281?

To fix CVE-2008-2281, it is recommended to update Microsoft Internet Explorer to the latest available version.

What software versions are affected by CVE-2008-2281?

CVE-2008-2281 affects Internet Explorer versions 6.0, 7.0, and 8.0b.

What consequences can result from exploiting CVE-2008-2281?

Exploiting CVE-2008-2281 could allow attackers to inject arbitrary web scripts or HTML in the Local Machine Zone.

Who is primarily at risk from CVE-2008-2281?

Users of affected versions of Internet Explorer who engage with malicious links are primarily at risk from CVE-2008-2281.