CVE-2005-4089: microsoft ie

Vulnerability summary

CVE-2005-4089 is a high (CVSS 7.1) vulnerability in microsoft ie. EPSS estimates a 22.07% chance of exploitation in the next 30 days, higher than 97.6% of scored vulnerabilities. 2 public exploits are recorded.

Timeline

1. 08-12-2005
   PublishedVulnerability first disclosed.
2. 07-08-2024
   Last modifiedVulnerability information updated.

Description

Microsoft Internet Explorer allows remote attackers to bypass cross-domain security restrictions and obtain sensitive information by using the @import directive to download files from other domains that are not valid Cascading Style Sheets (CSS) files, as demonstrated using Google Desktop, aka "CSSXSS" and "CSS Cross-Domain Information Disclosure Vulnerability."

• CWE-264Permissions, Privileges, and Access ControlsWeaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.