CVE:CVE-2010-0494
CNNVD:CNNVD-201003-507
Internet Explorer是Windows操作系统中默认捆绑的WEB浏览器。
Microsoft IE6、7、8 存在跨域漏洞。在客户端用户将一个浏览器窗口拖过另一个浏览器窗口的地方，远程攻击者可以通过该地方的特制的HTML文档绕过同源策略和造成跨站脚本攻击，也叫“HTML元素跨域漏洞”。
solution:Upgrade microsoft internet_explorer to a higher version than 7,6,8,8.0.6001,6:sp1,and avoid the version 7,6,8,8.0.6001,6:sp1; Upgrade microsoft windows_2003_server to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_server_2003 to a higher version than *:sp2,and avoid the version *:sp2; Upgrade microsoft windows_xp to a higher version than *:sp2,*:sp3,-:sp2,and avoid the version *:sp2,*:sp3,-:sp2; Upgrade microsoft windows_server_2008 to a higher version than *,*:sp2,-:sp2,*:r2,and avoid the version *:sp2,-:sp2,*:r2; Upgrade microsoft windows_vista to a higher version than *,*:sp1,*:sp2,-:sp1,-:sp2,and avoid the version *:sp1,*:sp2,-:sp1,-:sp2; Upgrade microsoft windows_7 to a higher version than -; Upgrade microsoft windows_2000 to a higher version than *:sp4,and avoid the version *:sp4