CVE-2007-4478

State: Published
Severity: Not scored
Published: Aug 22, 2007
Updated: Aug 7, 2024
Reserved: Aug 22, 2007

Description

Cross-site scripting (XSS) vulnerability in Microsoft Internet Explorer 6.0 and 7 allows user-assisted remote attackers to inject arbitrary web script or HTML in the local zone via a URI, when the document at the associated URL is saved to a local file, which then contains the URI string along with the document's original content.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

http://websecurity.com.ua/1241/
20070821 Vulnerabilities digestmailing-list
20081126 Re: XSS in Internet Explorer 6 and 7mailing-list
20081126 XSS in Internet Explorer 6 and 7mailing-list
http://securityvulns.ru/Rdocument865.html
http://securityvulns.com/news/Microsoft/IE/saved-css.html
45826vdb-entry

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.