QwikSec

Security Database

CVE

CWE

Training

CVE-2011-0096

Published: Jan 31, 2011

Modified: Jan 21, 2025

PUBLISHED

Description

The MHTML protocol handler in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, Windows Server 2008 Gold, SP2, R2, and R2 SP1, and Windows 7 Gold and SP1 does not properly handle a MIME format in a request for content blocks in a document, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a crafted web site that is visited in Internet Explorer, aka "MHTML Mime-Formatted Request Vulnerability."

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

third-party-advisory

x_refsource_CERT-VN

http://www.80vul.com/webzine_0x05/0x05%20IE%E4%B8%8BMHTML%E5%8D%8F%E8%AE%AE%E5%B8%A6%E6%9D%A5%E7%9A%84%E8%B7%A8%E5%9F%9F%E5%8D%B1%E5%AE%B3.html

x_refsource_MISC

third-party-advisory

x_refsource_CERT

vdb-entry

x_refsource_BID

vendor-advisory

x_refsource_MS

http://blogs.technet.com/b/msrc/archive/2011/01/28/microsoft-releases-security-advisory-2501696.aspx

x_refsource_CONFIRM

vdb-entry

x_refsource_SECTRACK

oval:org.mitre.oval:def:6956

vdb-entry

signature

x_refsource_OVAL

http://www.microsoft.com/technet/security/advisory/2501696.mspx

x_refsource_CONFIRM

http://blogs.technet.com/b/srd/archive/2011/01/28/more-information-about-the-mhtml-script-injection-vulnerability.aspx

x_refsource_CONFIRM

exploit

x_refsource_EXPLOIT-DB

vdb-entry

x_refsource_OSVDB

third-party-advisory

x_refsource_SECUNIA

ms-win-mhtml-info-disclosure(65000)

vdb-entry

x_refsource_XF

vdb-entry

x_refsource_VUPEN

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.