Vulnerability in Canon Network Camera Server Vb101
CVE-2005-4827
Internet Explorer 6.0, and possibly other versions, allows remote attackers to bypass the same origin security policy and make requests outside of the intended domain by calling open on an XMLHttpRequest object (Microsoft.XMLHTTP) and using tab, newline, and carriage return characters within the first argument (method name), which is supported by some proxy servers that convert tabs to spaces. NOTE: this issue can be leveraged to conduct referer spoofing, HTTP Request Smuggling, and other attacks.
Published · last modified .
CVSS v2 metric
CVSS v2 base score 7.5 (High). Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.112 (95.8th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 96th percentile — 95.8% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.107 · newest: 0.112 · change: +0.005
Affected products
- Canon Network Camera Server Vb101
- Microsoft Ie — versions 6, 6.0
- Microsoft Internet Explorer — versions 6, 6.0, 6.0.2600
References
- seclists.org/fulldisclosure/2007/Feb/0081.html (Vendor Advisory, mailing-list)
- www.securityfocus.com/archive/1/459172/100/0/threaded (mailing-list)
- www.securityfocus.com/bid/14969 (vdb-entry)
- www.securityfocus.com/archive/1/411585 (mailing-list, Exploit)