CVE-2010-0494

No fix known EPSS 23%

Cross-domain vulnerability in Microsoft Internet Explorer 6, 6 SP1, 7, and 8 allows user-assisted remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted HTML document in a situation where the client user drags one browser window across another browser window, aka "HTML Element Cross-Domain Vulnerability."

Published 2010-03-31 · CVE record · OSV

Products: microsoft internet_explorer, microsoft windows_2003_server, microsoft windows_server_2003, microsoft windows_xp, microsoft windows_server_2008, microsoft windows_vista, microsoft windows_7, microsoft windows_2000