Signature Detail

HTTP: Internet Explorer Cross Frame Scripting Restriction Bypass

This signature detects attempts to exploit a known vulnerability in Microsoft Internet Explorer (IE). Remote attackers can create a malicious Web site that bypasses the restrictions imposed on cross frame scripting. Within this site, the attacker places JavaScript outside the defined frameset within the parent HTML and forces the target frameset to maintain focus. Attackers can use this exploit to execute arbitrary code on a target system.

Extended Description

Remote attackers could bypass cross-frame security restrictions and obtain sensitive information.

References

• URL: http://support.microsoft.com/support/kb/articles/Q167/7/96.asp
• URL: http://www.idefense.com/application/poi/display?id=77&type=vulnerabilities&flashstatus=true