Bugsalert.com
Security News about Viruses, Spyware,
Trojans, Malware, XSS attacks.

CVE-2008-3173 (ie)

BugsAlert Home > CVE-2008-3173 (ie)
 
 

Microsoft Internet Explorer allows web sites to set cookies for domains that have a public suffix with more than one dot character, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session, aka "Cross-Site Cooking." NOTE: this issue may exist because of an insufficient fix for CVE-2004-0866.




Original Source: http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3173

Learn more about CVE-2008-3173 (ie)
 
Tags: cve-2008-3173

Related Items

      Fa Persian Petition "id" SQL Injection Vulnerability

      BKDR_RBOT.EBH

      Mandriva Security Update Fixes teTeX DVI and PDF Vulnerabilities

      OpenSSL FIPS Object Module PRNG Security Issue

      News: Researchers find more flaws in wireless security

      CVE-2008-2290 (Altiris Deployment Solution)

      CVE-2008-1877 (tss)

 

Pixel