CVE-2012-0007

State: Published
Severity: Not scored
Published: Jan 10, 2012
Updated: Aug 6, 2024
Reserved: Nov 9, 2011

Description

The Microsoft Anti-Cross Site Scripting (AntiXSS) Library 3.x and 4.0 does not properly evaluate characters after the detection of a Cascading Style Sheets (CSS) escaped character, which allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML input, aka "AntiXSS Library Bypass Vulnerability."

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
n/an/a	n/aAffected

References

51291vdb-entry
TA12-010Athird-party-advisory
1026499vdb-entry
MS12-007vendor-advisory
oval:org.mitre.oval:def:14314vdb-entrysignature
47483third-party-advisory
47516third-party-advisory

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.