CVE:CVE-2005-4827
CNNVD:CNNVD-200512-877
Internet Explorer 6.0及可能的其他版本，远程攻击者可绕过同源安全策略并在预期的域之外进行请求，作法是通过对一个XMLHttpRequest(Microsoft.XMLHTTP) 对象调用open并在第一个参数(方法名称)中使用制表符、换行和回车字符，一些可以将制表符转化为空格的代理服务器能够支持这种作法。
solution:Upgrade microsoft ie to a higher version than 6,6:sp1,6:windows_2000_sp4,6:windows_server_2003_sp1,6:windows_server_2003_sp1_itanium,6:windows_server_2003_sp1_itanium_systems,6:windows_xp_sp2,6.0,6.0:sp1,6.0:sp2,6.0:windows_xp_sp2,and avoid the version 6,6:sp1,6:windows_2000_sp4,6:windows_server_2003_sp1,6:windows_server_2003_sp1_itanium,6:windows_server_2003_sp1_itanium_systems,6:windows_xp_sp2,6.0,6.0:sp1,6.0:sp2,6.0:windows_xp_sp2; Upgrade microsoft internet_explorer to a higher version than 6:sp1,6.0,6.0.2600,6.0.2800,6.0.2800.1106,6.0.2900.2180,and avoid the version 6:sp1,6.0,6.0.2600,6.0.2800,6.0.2800.1106,6.0.2900.2180; Upgrade canon network_camera_server_vb101 to a higher version than *