Signature Detail
Short Name |
HTTP:STC:IE:8-XSS-FILTER |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Microsoft Internet Explorer 8 XSS Filter script Tag Cross-Site Scripting |
Release Date |
2012/12/12 |
Update Number |
2210 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Microsoft Internet Explorer 8 XSS Filter script Tag Cross-Site Scripting
This signature detects known Cross Site Scripting attacks against Microsoft Internet Explorer 8 in the way it applies its XSS filters. A successful attack may lead to malicious client side code execution.
Extended Description
The XSS Filter in Microsoft Internet Explorer 8 does not properly perform neutering for the SCRIPT tag, which allows remote attackers to conduct cross-site scripting (XSS) attacks against web sites that have no inherent XSS vulnerabilities, a different issue than CVE-2009-4074.
Affected Products
- microsoft ie 8
References