CVE-2009-0239

Currently unrated

Key Information:

Vendor
Microsoft
Status
Windows Search
Vendor
CVE Published:
10 June 2009

Summary

Cross-site scripting (XSS) vulnerability in Windows Search 4.0 for Microsoft Windows XP SP2 and SP3 and Server 2003 SP2 allows user-assisted remote attackers to inject arbitrary web script or HTML via a crafted file that appears in a preview in a search result, aka "Script Execution in Windows Search Vulnerability."

References

http://www.vupen.com/english/advisories/2009/1542
vdb-entryx_refsource_VUPEN
http://osvdb.org/54935
vdb-entryx_refsource_OSVDB
https://docs.microsoft.com/en-us/security-updates/securit...
vendor-advisoryx_refsource_MS

EPSS Score

31% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Collectors

NVD DatabaseMitre Database
.