 | |
| |
| 20 Apr 2010 | #1 |
| | Guidance on Internet Explorer XSS Filter. Quote: The XSS Filter related Blackhat EU presentation discussed a vulnerability that was previously disclosed and addressed in the January security update to Internet Explorer (MS10-002). This attack scenario involved modified HTTP responses, enabling XSS on sites that would not otherwise be vulnerable. An additional update tothe IE XSS Filteris currently scheduled for release in June. This change will address a SCRIPT tag attack scenario described in the Blackhat EU presentation. This issue manifests when malicious script can “break out” from within a construct that is already within an existing script block. While the issue identified and addressed in MS10-002 was identified to exist on high-profile web sites, thus far real-world examples of the SCRIPT tag neutering attack scenario have been hard to come by. The Microsoft Security Response Center (MSRC) : Guidance on Internet Explorer XSS Filter |
My System Specs | |
 |
Guidance on Internet Explorer XSS Filter. problems?
| Thread Tools | |
| Similar help and support threads for: Guidance on Internet Explorer XSS Filter. | ||||
| Thread | Forum | |||
| Internet Explorer SmartScreen Filter - Turn On or Off | Tutorials | |||
| InPrivate Filter Manager for Internet Explorer 8 | Browsers & Mail | |||
| Internet Explorer - SmartScreen Filter - Prevent Bypassing Warnings | Tutorials | |||
| Guidance on Internet Explorer XSS Filter | News | |||
| AC3 Filter Configuration Internet Explorer Removal? | Software | |||
All times are GMT -5. The time now is 12:32 PM.
