CVE:CVE-2010-3243
CNNVD:CNNVD-201010-099
Microsoft Internet Explorer 是微软发布的非常流行的WEB浏览器。
Microsoft Internet Explorer 8版本中的toStaticHTML函数和Microsoft Windows SharePoint Services 3.0 SP2版本和Office SharePoint Server 2007 SP2版本中的SafeHTML函数中存在跨站脚本攻击漏洞。远程攻击者可以借助未明向量注入任意web脚本或者HTML。
solution:Upgrade microsoft sharepoint_server to a higher version than 2007:sp2,and avoid the version 2007:sp2; Upgrade microsoft sharepoint_services to a higher version than 3.0:sp2,and avoid the version 3.0:sp2; Upgrade microsoft internet_explorer to a higher version than 8,and avoid the version 8