Signature Detail

HTTP: Microsoft toStaticHTML API Information Disclosure Vulnerability

This signature detects attempts to exploit a known vulnerability against Microsoft toStaticHTML API. A successful attack can result in the attacker gaining unauthorized information about the target system without the victim's knowledge.

Extended Description

Microsoft Internet Explorer is prone to an information-disclosure vulnerability that affects the 'toStaticHTML' API. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks.

Affected Products

• Avaya Aura Conferencing 6.0 Standard
• Avaya CallPilot 4.0
• Avaya CallPilot 5.0
• Avaya Communication Server 1000 Telephony Manager 3.0
• Avaya Communication Server 1000 Telephony Manager 4.0
• Avaya Meeting Exchange 5.0
• Avaya Meeting Exchange 5.0.0.0.52
• Avaya Meeting Exchange 5.0 SP1
• Avaya Meeting Exchange 5.0 SP2
• Avaya Meeting Exchange 5.1
• Avaya Meeting Exchange 5.1 SP1
• Avaya Meeting Exchange 5.2
• Avaya Meeting Exchange 5.2 SP1
• Avaya Meeting Exchange 5.2 SP2
• Avaya Meeting Exchange - Client Registration Server
• Avaya Meeting Exchange - Recording Server
• Avaya Meeting Exchange - Streaming Server
• Avaya Meeting Exchange - Web Conferencing Server
• Avaya Meeting Exchange - Webportal
• Avaya Messaging Application Server 4
• Avaya Messaging Application Server 5
• Avaya Messaging Application Server 5.2
• Microsoft Groove Server 2010 SP1
• Microsoft Groove Server 2010
• Microsoft Internet Explorer 7.0
• Microsoft Internet Explorer 7.0
• Microsoft Internet Explorer 8
• Microsoft SharePoint Foundation 2010 SP1
• Microsoft SharePoint Foundation 2010
• Microsoft SharePoint Server 2007 SP2
• Microsoft SharePoint Server 2007 x64 SP2
• Microsoft SharePoint Server 2010 SP1
• Microsoft SharePoint Server 2010 Enterprise Edition
• Microsoft SharePoint Server 2010 Standard Edition
• Microsoft SharePoint Services 3.0 SP2
• Microsoft SharePoint Services 64-bit 3.0 SP2

References

• BugTraq: 48199
• CVE: CVE-2011-1252