First published: Wed Apr 13 2011(Updated: )
Microsoft Internet Explorer 6, 7, and 8 does not enforce intended domain restrictions on content access, which allows remote attackers to obtain sensitive information or conduct clickjacking attacks via a crafted web site, aka "Frame Tag Information Disclosure Vulnerability."
Credit: secure@microsoft.com
Affected Software | Affected Version | How to fix |
---|---|---|
Internet Explorer | =6 | |
Microsoft Windows Server | =sp2 | |
Microsoft Windows XP | =sp2 | |
Microsoft Windows XP | =sp3 | |
Internet Explorer | =7 | |
Microsoft Windows Server | ||
Microsoft Windows Server | =sp2 | |
Microsoft Windows Vista | =sp1 | |
Microsoft Windows Vista | =sp2 | |
Microsoft Windows XP | =sp2 | |
Internet Explorer | =8 | |
Microsoft Windows 7 | ||
Microsoft Windows Server | =r2 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2011-1244 is classified as a medium severity vulnerability.
The fix for CVE-2011-1244 includes applying the latest security updates for Internet Explorer.
CVE-2011-1244 affects Internet Explorer versions 6, 7, and 8.
CVE-2011-1244 can be exploited for obtaining sensitive information and conducting clickjacking attacks.
CVE-2011-1244 affects users running Internet Explorer 6, 7, and 8 on various Windows operating systems.