Microsoft Browsers Spoofing Vulnerability Affects Multiple Products
CVE-2019-0608

4.3MEDIUM

Key Information:

Vendor
Microsoft
Status
Internet Explorer 9
Internet Explorer 11
Internet Explorer 11 On Windows Server 2012
Internet Explorer 11 On Windows 10 Version 1903 For 32-bit Systems
Vendor
CVE Published:
10 October 2019

Summary

A spoofing vulnerability has been identified in Microsoft Browsers, where HTTP content is improperly parsed. This issue can potentially allow an attacker to present misleading information to users by masquerading as a trustworthy source. Consequently, users may unintentionally disclose sensitive information.

Affected Version(s)

Internet Explorer 10 Windows Server 2012

Internet Explorer 11 Windows 7 for 32-bit Systems Service Pack 1

Internet Explorer 11 Windows 7 for x64-based Systems Service Pack 1

References

https://portal.msrc.microsoft.com/en-US/security-guidance...
x_refsource_MISC

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.