CVE:CVE-2010-3324
CNNVD:CNNVD-201009-179
Microsoft Internet Explorer 是微软发布的非常流行的WEB浏览器。
Microsoft Internet Explorer 8中的toStaticHTML函数和Microsoft Windows SharePoint Services 3.0 SP2，SharePoint Foundation 2010，Office SharePoint Server 2007 SP2，Groove Server 2010，Office Web Apps中的SafeHTML函数中存在跨站脚本攻击漏洞。远程攻击者可以借助特制层叠样式表(CSS)@import规则的使用绕过跨站脚本保护机制并执行跨站脚本攻击。
solution:Upgrade microsoft groove_server to a higher version than 2010,and avoid the version 2010; Upgrade microsoft internet_explorer to a higher version than 8,and avoid the version 8; Upgrade microsoft sharepoint_foundation to a higher version than 2010,and avoid the version 2010; Upgrade microsoft sharepoint_server to a higher version than 2007:sp2,and avoid the version 2007:sp2; Upgrade microsoft sharepoint_services to a higher version than 3.0:sp2,and avoid the version 3.0:sp2; Upgrade microsoft web_apps to a higher version than *