CVE Database
/

CVE-2008-4029

Back to search

CVE-2008-4029

Published: Nov 12, 2008

Modified: Aug 7, 2024

PUBLISHED

Description

Cross-domain vulnerability in Microsoft XML Core Services 3.0 and 4.0, as used in Internet Explorer, allows remote attackers to obtain sensitive information from another domain via a crafted XML document, related to improper error checks for external DTDs, aka "MSXML DTD Cross-Domain Scripting Vulnerability."

VendorProductVersions

n/a

n/a

affected
n/a

References

SSRT080164
vendor-advisory
x_refsource_HP
TA08-316A
third-party-advisory
x_refsource_CERT
oval:org.mitre.oval:def:5999
vdb-entry
signature
x_refsource_OVAL
32155
vdb-entry
x_refsource_BID
HPSBST02386
vendor-advisory
x_refsource_HP
ADV-2008-3111
vdb-entry
x_refsource_VUPEN
MS08-069
vendor-advisory
x_refsource_MS
1021164
vdb-entry
x_refsource_SECTRACK

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now