CVE-2008-4020: XSS
Cross-site scripting (XSS) vulnerability in Microsoft Office XP SP3 allows remote attackers to inject arbitrary web script or HTML via a document that contains a "Content-Disposition: attachment" header and is accessed through a cdo: URL, which renders the content instead of raising a File Download dialog box, aka "Vulnerability in Content-Disposition Header Vulnerability."
Affected Software
Remediation
Patch Available
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4020?
CVE-2008-4020 is considered a critical vulnerability due to its potential to allow remote code execution through cross-site scripting.
How do I fix CVE-2008-4020?
To fix CVE-2008-4020, it's recommended to update Microsoft Office XP to the latest security patches provided by Microsoft.
Who is affected by CVE-2008-4020?
CVE-2008-4020 affects users of Microsoft Office XP SP3 that access documents via cdo: URLs.
What type of attack does CVE-2008-4020 enable?
CVE-2008-4020 enables attackers to perform cross-site scripting (XSS) attacks, executing arbitrary web scripts or HTML on users' systems.
Are there any workarounds for CVE-2008-4020?
As a workaround for CVE-2008-4020, users can avoid using documents accessible through cdo: URLs until a patch is applied.