CVE-2010-0555
Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving the…
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 20.9%, higher than 97% of all known CVEs. Patch or mitigate before the next change window.
Description
Microsoft Internet Explorer 5.01 SP4, 6, 6 SP1, 7, and 8 does not prevent rendering of non-HTML local files as HTML documents, which allows remote attackers to bypass intended access restrictions and read arbitrary files via vectors involving the product's use of text/html as the default content type for files that are encountered after a redirection, aka the URLMON sniffing vulnerability, a variant of CVE-2009-1140 and related to CVE-2008-1448.
- CVSS 2.0
- 9.3 HIGHAV:N/AC:M/Au:N/C:C/I:C/A:C
- EPSS
- 20.95% probability · 97th percentile
- CISA KEV
- Not listed
- Affected
- microsoft/internet explorer · microsoft/windows server 2003 · microsoft/windows xp · microsoft/windows server 2008 · microsoft/windows vista · microsoft/windows 2000
- Source
- cve@mitre.org
References
- http://blogs.technet.com/msrc/archive/2010/02/03/security-advisory-980088-released.aspx
- http://isc.sans.org/diary.html?n&storyid=8152
- http://osvdb.org/62157
- http://www.coresecurity.com/content/internet-explorer-dynamic-object-tagExploit
- http://www.microsoft.com/technet/security/advisory/980088.mspxVendor Advisory
- http://www.securityfocus.com/archive/1/509345/100/0/threaded
- http://www.securityfocus.com/bid/38055
- http://www.securityfocus.com/bid/38056
- http://blogs.technet.com/msrc/archive/2010/02/03/security-advisory-980088-released.aspx
- http://isc.sans.org/diary.html?n&storyid=8152
- http://osvdb.org/62157
- http://www.coresecurity.com/content/internet-explorer-dynamic-object-tagExploit
- http://www.microsoft.com/technet/security/advisory/980088.mspxVendor Advisory
- http://www.securityfocus.com/archive/1/509345/100/0/threaded
- http://www.securityfocus.com/bid/38055
- http://www.securityfocus.com/bid/38056
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.