Test ID:	1.3.6.1.4.1.25623.1.0.803302
Category:	Windows
Title:	Microsoft Internet Explorer Domain Policy Bypass Vulnerability
Summary:	Microsoft Internet Explorer is prone to domain policy bypass vulnerability.
Description:	Summary: Microsoft Internet Explorer is prone to domain policy bypass vulnerability. Vulnerability Insight: The flaw due to error in UNC share pathname in SRC attribute of a SCRIPT element, which allows attackers to obtain sensitive information about the existence of files and read certain data from files. Vulnerability Impact: Successful exploitation will allow attackers to disclosure the information when a user views a specially crafted webpage. Affected Software/OS: Microsoft Internet Explorer version 6.x/7.x/8.x/9.x on Microsoft Windows XP and 2003. Solution: Upgrade to Internet Explorer 10. CVSS Score: 2.6 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:N/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2012-6502 http://www.nsfocus.com/en/2012/advisories_1228/119.html
Copyright	Copyright (C) 2013 Greenbone AG

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.