CVE-2008-5556: XSS

Published Dec 12, 2008

Updated

DISPUTED The XSS Filter in Microsoft Internet Explorer 8.0 Beta 2 does not recognize attack patterns designed to operate against web pages that are encoded with utf-7, which allows remote attackers to bypass the XSS protection mechanism and conduct XSS attacks by injecting crafted utf-7 content. NOTE: the vendor reportedly disputes this issue, stating "Behaviour is by design."

Affected Software

1 affected component

Microsoft Internet Explorer=8-beta2

Event History

Dec 12, 2008

CVE Published

via MITRE·06:13 PM

Data Sourced

via MITRE·06:13 PM

Description

Disputed

06:30 PM

Data Sourced

via NVD·06:30 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2008-5556?

CVE-2008-5556 is disputed, but it is important to note that it concerns a vulnerability that may allow XSS attacks.

How do I fix CVE-2008-5556?

To mitigate CVE-2008-5556, it's recommended to avoid using vulnerable versions of Internet Explorer, specifically version 8 Beta 2.

Which software is affected by CVE-2008-5556?

CVE-2008-5556 affects Microsoft Internet Explorer 8 Beta 2.

What type of vulnerability is CVE-2008-5556?

CVE-2008-5556 is a cross-site scripting (XSS) vulnerability.

Can CVE-2008-5556 be exploited remotely?

Yes, CVE-2008-5556 can be exploited remotely by attacking with crafted utf-7 content.