CVE-2013-1297

Published: May 15, 2013

Modified: Aug 6, 2024

PUBLISHED

Description

Microsoft Internet Explorer 6 through 8 does not properly restrict data access by VBScript, which allows remote attackers to perform cross-domain reading of JSON files via a crafted web site, aka "JSON Array Information Disclosure Vulnerability."

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

MS13-037

vendor-advisory

x_refsource_MS

TA13-134A

third-party-advisory

x_refsource_CERT

oval:org.mitre.oval:def:16518

vdb-entry

signature

x_refsource_OVAL

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Start Training

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.

Scan Now

CVE-2013-1297

Description

Affected Products

References