|20 Apr 2010||#1|
| || |
Guidance on Internet Explorer XSS Filter.
The XSS Filter related Blackhat EU presentation discussed a vulnerability that was previously disclosed and addressed in the January security update to Internet Explorer (MS10-002). This attack scenario involved modified HTTP responses, enabling XSS on sites that would not otherwise be vulnerable.
An additional update tothe IE XSS Filteris currently scheduled for release in June. This change will address a SCRIPT tag attack scenario described in the Blackhat EU presentation. This issue manifests when malicious script can “break out” from within a construct that is already within an existing script block. While the issue identified and addressed in MS10-002 was identified to exist on high-profile web sites, thus far real-world examples of the SCRIPT tag neutering attack scenario have been hard to come by.
The Microsoft Security Response Center (MSRC) : Guidance on Internet Explorer XSS Filter
|My System Specs|
|Similar help and support threads for2: Guidance on Internet Explorer XSS Filter.|
|Internet Explorer SmartScreen Filter - Report Unsafe Website||Tutorials|
|Internet Explorer SmartScreen Filter - Turn On or Off||Tutorials|
|InPrivate Filter Manager for Internet Explorer 8||Browsers & Mail|
|Internet Explorer - Cross-site Scripting (XSS) Filter - Turn On or Off||Tutorials|
|Internet Explorer SmartScreen Filter - Manually Check a Website||Tutorials|
|Guidance on Internet Explorer XSS Filter||News|
|AC3 Filter Configuration Internet Explorer Removal?||Software|
|Our Sites ||Site Links ||About Us ||Find Us |
Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd
All times are GMT -5. The time now is 06:17 PM.