What is CVE-2009-0419?

CVE-2009-0419 is a vulnerability in Microsoft Xml_core_services, classified under CWE-264. Published 2009-02-04.

Is CVE-2009-0419 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in Microsoft Xml_core_services

CVE-2009-0419

Microsoft XML Core Services, as used in Microsoft Expression Web, Office, Internet Explorer 6 and 7, and other products, does not properly restrict access from web pages to Set-Cookie2 HTTP response headers, which allows remote attackers t…

EPSS: 0.153 (96.4th percentile) — read the EPSS interpretation.

Affected products

Microsoft Xml_core_services
N/a — versions n/a

Weakness classification (CWE)

CWE-264

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (x_refsource_MISC)

Frequently asked questions

What is CVE-2009-0419?: CVE-2009-0419 is a vulnerability in Microsoft Xml_core_services, classified under CWE-264. Published 2009-02-04.
Is CVE-2009-0419 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.