CVE-2011-1962: Input Validation
Microsoft Internet Explorer 6 through 9 does not properly handle unspecified character sequences, which allows remote attackers to read content from a different (1) domain or (2) zone via a crafted web site that triggers "inactive filtering," aka "Shift JIS Character Encoding Vulnerability."
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1962?
CVE-2011-1962 has a critical severity rating due to its potential to allow remote attackers to read sensitive information from a different domain or zone.
How do I fix CVE-2011-1962?
To fix CVE-2011-1962, users should apply the security updates provided by Microsoft for affected versions of Internet Explorer.
Which versions of Internet Explorer are affected by CVE-2011-1962?
CVE-2011-1962 affects Internet Explorer versions 6, 7, 8, and 9.
What attack vector does CVE-2011-1962 exploit?
CVE-2011-1962 exploits unspecified character sequences through specially crafted websites that trigger inactive filtering.
Is there a workaround for CVE-2011-1962?
Disabling or limiting the use of Internet Explorer can serve as a temporary workaround for CVE-2011-1962 until patches are applied.