Cross-site scripting (XSS) vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2; Office SharePoint Server 2007 SP1 and SP2; SharePoint Services 3.0 SP1 and SP2; and Internet Explorer 8 allows remote attackers to inject arbitrary web script or HTML via vectors related to sanitization.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: microsoft
Published: 2010-06-08T20:00:00
Updated: 2024-08-07T01:21:17.161Z
Reserved: 2010-04-05T00:00:00
Link: CVE-2010-1257
Vulnrichment
No data.
NVD
Status : Modified
Published: 2010-06-08T20:30:02.397
Modified: 2023-12-07T18:38:56.693
Link: CVE-2010-1257
Redhat
No data.