Microsoft Browsers Tampering Vulnerability - CVE-2019-0764ID: oval:org.secpod.oval:def:54131 | Date: (C)2019-04-10 (M)2024-03-06 |
Class: VULNERABILITY | Family: windows |
A tampering vulnerability exists when Microsoft browsers do not properly validate input under specific conditions. An attacker who exploited the vulnerability could pass custom command line parameters. In a web-based attack scenario, an attacker could host a specially crafted website designed to appear as a legitimate website to the user. However, the attacker would have no way to force the user to visit the specially crafted website. The attacker would have to convince the user to visit the specially crafted website, typically by way of enticement in an email or instant message. The security update addresses the vulnerability by correcting how Microsoft browsers validate input.
Platform: |
Microsoft Windows 10 |
Microsoft Windows 7 |
Microsoft Windows 8.1 |
Microsoft Windows Server 2008 |
Microsoft Windows Server 2008 R2 |
Microsoft Windows Server 2012 |
Microsoft Windows Server 2012 R2 |
Microsoft Windows Server 2016 |
Microsoft Windows Server 2019 |
Product: |
Microsoft Internet Explorer 10 |
Microsoft Internet Explorer 11 |
Microsoft Internet Explorer 9 |
Microsoft Edge |