SecuritySpace - CVE-2013-1450

Vulnerability Search		Search 324607 CVE descriptions and 146377 test descriptions, access 10,000+ cross references.
	Tests CVE All

CVE ID: CVE-2013-1450

Description: Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not properly reuse TCP sessions to the proxy server, which allows remote attackers to obtain sensitive information intended for a specific host via a crafted HTML document that triggers many HTTPS requests and then triggers an HTTP request to that host, as demonstrated by reading a Cookie header, aka MSRC 12096gd.

Test IDs: None available

Cross References: Common Vulnerability Exposure (CVE) ID: CVE-2013-1450
http://pastebin.com/raw.php?i=rz9BcBey
http://www.youtube.com/ChristianHaiderPoC
http://www.youtube.com/watch?v=TPqagWAvo8U

CVE ID:	CVE-2013-1450
Description:	Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not properly reuse TCP sessions to the proxy server, which allows remote attackers to obtain sensitive information intended for a specific host via a crafted HTML document that triggers many HTTPS requests and then triggers an HTTP request to that host, as demonstrated by reading a Cookie header, aka MSRC 12096gd.
Test IDs:	None available
Cross References:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1450 http://pastebin.com/raw.php?i=rz9BcBey http://www.youtube.com/ChristianHaiderPoC http://www.youtube.com/watch?v=TPqagWAvo8U