GCVE - cpe:2.3:a:microsoft:ie:9:beta:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:microsoft:ie:9:beta:*:*:*:*:*:*

part: a version: 9 update: beta

Vendor	Microsoft (`67206627-3ef6-5870-9d98-26a9f2e7065c`)
Product	Ie (`d6c68fe7-98fc-54b4-a290-1745b169773d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-2383`	vulnerable	2026-06-08 04:58:05.848693	Details available Microsoft Internet Explorer 9 and earlier does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing an http: URL that redirects to a file: URL, as demonstrated by a Facebook game, related to a "cookiejacking" issue, aka "Drag and Drop Information Disclosure Vulnerability." NOTE: this vulnerability exists because of an incomplete fix in the Internet Explorer 9 release. Published: 2011-06-03T17:00:00.000Z Updated: 2024-08-06T23:00:33.783Z Open on db.gcve.eu Reference links http://www.informationweek.com/news/security/vulnerabilities/229700031 https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-057 http://conference.hackinthebox.org/hitbsecconf2011ams/?page_id=1388 http://news.cnet.com/8301-1009_3-20066419-83.html http://www.eweek.com/c/a/Security/IE-Flaw-Lets-Attackers-Steal-Cookies-Access-User-Accounts-402503/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2011-2382`	vulnerable	2026-06-08 04:58:05.779317	Details available Microsoft Internet Explorer 8 and earlier, and Internet Explorer 9 beta, does not properly restrict cross-zone drag-and-drop actions, which allows user-assisted remote attackers to read cookie files via vectors involving an IFRAME element with a SRC attribute containing a file: URL, as demonstrated by a Facebook game, related to a "cookiejacking" issue. Published: 2011-06-03T17:00:00.000Z Updated: 2024-09-17T02:41:25.100Z Open on db.gcve.eu Reference links http://www.informationweek.com/news/security/vulnerabilities/229700031 http://conference.hackinthebox.org/hitbsecconf2011ams/?page_id=1388 http://news.cnet.com/8301-1009_3-20066419-83.html http://www.eweek.com/c/a/Security/IE-Flaw-Lets-Attackers-Steal-Cookies-Access-User-Accounts-402503/ http://www.theregister.co.uk/2011/05/25/microsoft_internet_explorer_cookiejacking/	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.