Signature Detail

HTTP: Microsoft Internet Explorer Anti-XSS Library Information Disclosure

This signature detects attempts to circumvent Microsoft's Anti-XSS Library. A successful attack could bypass the Cross Site Script (XSS) filter and allow unintended sensitive information disclosure to malicious third parties, possibly including user names, passwords, addresses, phone numbers, credit card numbers, or government identification numbers.

Extended Description

Microsoft Anti-Cross Site Scripting (AntiXSS) Library is prone to a security-bypass vulnerability that affects the sanitization module. An attacker can exploit this vulnerability to bypass the filter and conduct cross-site scripting attacks. Successful exploits may allow attackers to execute arbitrary script code and steal cookie-based authentication credentials. Microsoft Anti-Cross Site Scripting Library 3.x and 4.0 are vulnerable.

Affected Products

• Avaya aura_conferencing 6.0 Standard
• Avaya callpilot 4.0
• Avaya callpilot 5.0
• Avaya communication_server_1000_telephony_manager 3.0
• Avaya communication_server_1000_telephony_manager 4.0
• Avaya meeting_exchange 5.0
• Avaya meeting_exchange 5.0.0.0.52
• Avaya meeting_exchange 5.0 SP1
• Avaya meeting_exchange 5.0 SP2
• Avaya meeting_exchange 5.1
• Avaya meeting_exchange 5.1 SP1
• Avaya meeting_exchange 5.2
• Avaya meeting_exchange 5.2 SP1
• Avaya meeting_exchange 5.2 SP2
• Avaya meeting_exchange-client_registration_server
• Avaya meeting_exchange-recording_server
• Avaya meeting_exchange-streaming_server
• Avaya meeting_exchange-web_conferencing_server
• Avaya meeting_exchange-webportal
• Avaya messaging_application_server 4
• Avaya messaging_application_server 5
• Avaya messaging_application_server 5.2
• Microsoft anti-cross_site_scripting_library 3
• Microsoft anti-cross_site_scripting_library 4.0

References

• BugTraq: 51291
• CVE: CVE-2012-0007
• URL: http://support.miscrosoft.com/kb/2607664