CVE-2019-1192— Microsoft Edge和Internet Explorer 安全特征问题漏洞

Microsoft Browsers Security Feature Bypass Vulnerability

A security feature bypass vulnerability exists when Microsoft browsers improperly handle requests of different origins. The vulnerability allows Microsoft browsers to bypass Same-Origin Policy (SOP) restrictions, and to allow requests that should otherwise be ignored. An attacker who successfully exploited the vulnerability could force the browser to send data that would otherwise be restricted. In a web-based attack scenario, an attacker could host a specially crafted website that is designed to exploit the vulnerability through Microsoft browsers and then convince a user to view the website. The attacker could also take advantage of compromised websites, and websites that accept or host user-provided content or advertisements. These websites could contain specially crafted content that could exploit the vulnerability. The security update addresses the vulnerability by modifying how affected Microsoft browsers handle different-origin requests.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

N/A

Microsoft Edge和Internet Explorer 安全特征问题漏洞

Microsoft Edge和Microsoft Internet Explorer（IE）都是美国微软（Microsoft）公司的产品。Microsoft Edge是一款Windows 10之后版本系统附带的Web浏览器。Microsoft Internet Explorer是一款Windows操作系统附带的Web浏览器。 Microsoft Edge、IE 11和10中存在安全漏洞，该漏洞源于浏览器没有正确处理不同源的请求。攻击者可利用该漏洞绕过同源策略并允许进行本应忽略的请求。

N/A

N/A