CVE-2011-1252: XSS
Cross-site scripting (XSS) vulnerability in the SafeHTML function in the toStaticHTML API in Microsoft Internet Explorer 7 and 8, Office SharePoint Server 2007 SP2, Office SharePoint Server 2010 Gold and SP1, Groove Server 2010 Gold and SP1, Windows SharePoint Services 3.0 SP2, and SharePoint Foundation 2010 Gold and SP1 allows remote attackers to inject arbitrary web script or HTML via unspecified strings, aka "toStaticHTML Information Disclosure Vulnerability" or "HTML Sanitization Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1252?
CVE-2011-1252 is classified as a moderate severity vulnerability due to its potential impact on web application security.
How do I fix CVE-2011-1252?
To fix CVE-2011-1252, ensure that you update Microsoft Internet Explorer to the latest version, along with any applicable security patches.
What systems are affected by CVE-2011-1252?
CVE-2011-1252 affects multiple versions of Microsoft Internet Explorer, specifically versions 7 and 8, and various SharePoint and server products.
What type of vulnerability is CVE-2011-1252?
CVE-2011-1252 is a cross-site scripting (XSS) vulnerability, which can allow attackers to execute arbitrary scripts in the context of a user's browser.
Can I use a different browser to avoid CVE-2011-1252?
While using a different browser may reduce exposure to CVE-2011-1252, it is still recommended to address the vulnerability by updating affected software.