Signature Detail
Short Name |
HTTP:STC:IE:EUC-JP-XSS |
|---|---|
Severity |
High |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Microsoft Internet Explorer EUC-JP Character Encoding Universal Cross Site Scripting |
Release Date |
2013/09/30 |
Update Number |
2304 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: Microsoft Internet Explorer EUC-JP Character Encoding Universal Cross Site Scripting
This signature detects attempts to exploit a known vulnerability in Microsoft Internet Explorer. Attackers can maliciously encode JavaScript in Internet Explorer to browser session.
Extended Description
Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6 through 10 allows remote attackers to inject arbitrary web script or HTML via crafted character sequences with EUC-JP encoding, aka "EUC-JP Character Encoding Vulnerability."
Affected Products
- microsoft internet_explorer 10
- microsoft internet_explorer 6
- microsoft internet_explorer 7
- microsoft internet_explorer 8
- microsoft internet_explorer 9
References
- BugTraq: 61664
- CVE: CVE-2013-3192