CVE-2008-4033: Infoleak
Cross-domain vulnerability in Microsoft XML Core Services 3.0 through 6.0, as used in Microsoft Expression Web, Office, Internet Explorer, and other products, allows remote attackers to obtain sensitive information from another domain and corrupt the session state via HTTP request header fields, as demonstrated by the Transfer-Encoding field, aka "MSXML Header Request Vulnerability."
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4033?
CVE-2008-4033 has a medium severity rating due to its potential for information disclosure.
How do I fix CVE-2008-4033?
To fix CVE-2008-4033, update Microsoft XML Core Services to the latest version available.
What products are affected by CVE-2008-4033?
CVE-2008-4033 affects Microsoft XML Core Services versions 3.0, 4.0, 5.0, and 6.0 as well as Microsoft products that utilize these services.
How can CVE-2008-4033 be exploited?
CVE-2008-4033 can be exploited by remote attackers through manipulated HTTP request header fields to obtain sensitive cross-domain information.
Is my system vulnerable to CVE-2008-4033?
You might be vulnerable to CVE-2008-4033 if you are using Microsoft XML Core Services 3.0 to 6.0.