Web Scripting Vulnerability in Microsoft Internet Explorer

CVE-2009-2057

Summary

Microsoft Internet Explorer versions prior to 8 are vulnerable due to their reliance on the HTTP Host header in interpreting the context of documents from a proxy server's 4xx or 5xx CONNECT response. This flaw can be exploited by malicious actors in man-in-the-middle attacks, enabling them to alter the CONNECT response and execute arbitrary web scripts. As a result, users may unknowingly execute malicious code, compromising their security while browsing the web.

References