CVE-2009-1140

Microsoft Internet Explorer 5.01 SP4; 6 SP1; 6 and 7 for Windows XP SP2 and SP3; 6 and 7 for Server 2003 SP2; 7 for Vista Gold, SP1, and SP2; and 7 for Server 2008 SP2 does not prevent HTML rendering of cached content, which allows remote attackers to bypass the Same Origin Policy via unspecified vectors, aka "Cross-Domain Information Disclosure Vulnerability."

CVSS v2.0

7.1 HIGHAV:N/AC:M/Au:N/C:C/I:N/A:N

EPSS

24.76% chance of exploitation in the next 30 days, 98th percentile

Published

2009-06-10

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/33024

References

• CVE Record
• NVD entry

Related

• CVE-2009-1136
• CVE-2009-1151
• CVE-2009-1122
• CVE-2009-1152
• CVE-2009-1092
• CVE-2009-1169