CVE-2010-3324: XSS
The toStaticHTML function in Microsoft Internet Explorer 8, and the SafeHTML function in Microsoft Windows SharePoint Services 3.0 SP2, SharePoint Foundation 2010, Office SharePoint Server 2007 SP2, Groove Server 2010, and Office Web Apps, allows remote attackers to bypass the cross-site scripting (XSS) protection mechanism and conduct XSS attacks via a crafted use of the Cascading Style Sheets (CSS) @import rule, aka "HTML Sanitization Vulnerability," a different vulnerability than CVE-2010-1257.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2010-3324?
CVE-2010-3324 has a critical severity due to its potential for remote code execution through cross-site scripting attacks.
How do I fix CVE-2010-3324?
To fix CVE-2010-3324, ensure that you apply the latest security updates and patches provided by Microsoft for the affected software.
Which software is affected by CVE-2010-3324?
CVE-2010-3324 affects Microsoft Internet Explorer 8, SharePoint Services 3.0 SP2, SharePoint Foundation 2010, Office SharePoint Server 2007 SP2, Groove Server 2010, and Office Web Apps.
What are the potential impacts of CVE-2010-3324?
The potential impacts of CVE-2010-3324 include unauthorized access to sensitive data and user accounts through successful cross-site scripting exploitation.
Is CVE-2010-3324 exploit available in the wild?
Yes, there have been reports of exploit attempts in the wild targeting CVE-2010-3324.