製品・ソフトウェアに関する情報

JVN脆弱性詳細

Microsoft Internet Explorer における重要な情報を取得される脆弱性

Title	Microsoft Internet Explorer における重要な情報を取得される脆弱性
Summary	Microsoft Internet Explorer には、異なるドメインまたは異なるゾーンからコンテンツにアクセスするスクリプトを適切に制限しないため、重要な情報を取得される脆弱性が存在します。
Possible impacts	第三者により、巧妙に細工された Web サイトを介して、重要な情報を取得される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	April 12, 2011, midnight
Registration Date	May 2, 2011, 2 p.m.
Last Update	May 2, 2011, 2 p.m.

Affected System

マイクロソフト

Microsoft Internet Explorer 6

Microsoft Internet Explorer 7

Microsoft Windows Server 2003

Microsoft Windows Server 2003 (itanium)

Microsoft Windows Server 2003 (x64)

Microsoft Windows Server 2008 (itanium)

Microsoft Windows Server 2008 (x64)

Microsoft Windows Server 2008 (x86)

Microsoft Windows Vista

Microsoft Windows Vista (x64)

Microsoft Windows XP (x64)

Microsoft Windows XP sp3

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2011-1245	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1245
National Vulnerability Database (NVD)
2	CVE-2011-1245	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-1245

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-200	https://jvndb.jvn.jp/ja/cwe/CWE-200.html

ベンダー情報

No	Name	URL
Microsoft Security Bulletin
1	MS11-018	http://www.microsoft.com/technet/security/bulletin/MS11-018.mspx
マイクロソフトセキュリティ情報
2	MS11-018	http://www.microsoft.com/japan/technet/security/bulletin/MS11-018.mspx
富士通セキュリティ情報
3	TA11-102A	http://software.fujitsu.com/jp/security/vulnerabilities/ta11-102a.html
絵でみるセキュリティ情報
4	MS11-018e	http://www.microsoft.com/japan/security/bulletins/MS11-018e.mspx

その他

No	Name	URL
IPA 緊急対策情報
1	20110413-ms11-018	http://www.ipa.go.jp/security/ciadr/vul/20110413-ms11-018.html
JPCERT 緊急報告
2	JPCERT-AT-2011-0008	https://www.jpcert.or.jp/at/2011/at110008.txt
JVN
3	JVNTA11-102A	http://jvn.jp/cert/JVNTA11-102A
Secunia Advisory
4	SA44153	http://secunia.com/advisories/44153
SecurityFocus
5	47192	http://www.securityfocus.com/bid/47192
US-CERT Cyber Security Alerts
6	SA11-102A	http://www.us-cert.gov/cas/alerts/SA11-102A.html
US-CERT Technical Cyber Security Alert
7	TA11-102A	http://www.us-cert.gov/cas/techalerts/TA11-102A.html
VUPEN Security
8	VUPEN/ADV-2011-0937	http://www.vupen.com/english/advisories/2011/0937
警察庁 @police
9	マイクロソフト社のセキュリティ修正プログラムについて(MS11-018,019,020,021,022,023,024,025,026,027,028,029,030,031,032,033,034)	http://www.npa.go.jp/cyberpolice/#topics

Change Log

No	Changed Details	Date of change
0	[2011年05月02日] 掲載	Feb. 17, 2018, 10:37 a.m.

NVD Vulnerability Information

CVE-2011-1245

Summary	Microsoft Internet Explorer 6 and 7 does not properly restrict script access to content from a (1) different domain or (2) different zone, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Javascript Information Disclosure Vulnerability."
Publication Date	April 14, 2011, 3:55 a.m.
Registration Date	Jan. 28, 2021, 4:38 p.m.
Last Update	Nov. 21, 2024, 10:25 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:microsoft:internet_explorer:6:::::::*
execution environment
1	cpe:2.3:o:microsoft:windows_2003_server::sp2::::::*
2	cpe:2.3:o:microsoft:windows_2003_server::sp2:itanium:::::
3	cpe:2.3:o:microsoft:windows_server_2003::sp2::::::*
4	cpe:2.3:o:microsoft:windows_xp::sp3::::::*
5	cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:::::*

Configuration2		or higher	or less	more than	less than
cpe:2.3:a:microsoft:internet_explorer:7:::::::*
execution environment
1	cpe:2.3:o:microsoft:windows_2003_server::sp2::::::*
2	cpe:2.3:o:microsoft:windows_2003_server::sp2:itanium:::::
3	cpe:2.3:o:microsoft:windows_server_2003::sp2::::::*
4	cpe:2.3:o:microsoft:windows_server_2008:::itanium:::::*
5	cpe:2.3:o:microsoft:windows_server_2008:::x32:::::*
6	cpe:2.3:o:microsoft:windows_server_2008:::x64:::::*
7	cpe:2.3:o:microsoft:windows_server_2008::sp2:x32:::::
8	cpe:2.3:o:microsoft:windows_server_2008::sp2:x64:::::
9	cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:::::*
10	cpe:2.3:o:microsoft:windows_vista::sp1::::::*
11	cpe:2.3:o:microsoft:windows_vista::sp2::::::*
12	cpe:2.3:o:microsoft:windows_vista:-:sp2::::::
13	cpe:2.3:o:microsoft:windows_vista:-:sp1::::::
14	cpe:2.3:o:microsoft:windows_xp::sp3::::::*
15	cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:::::*

Related information, measures and tools

No	URL	タグ
1	http://www.securityfocus.com/bid/47192
2	http://www.securitytracker.com/id?1025327
3	http://www.us-cert.gov/cas/techalerts/TA11-102A.html	US Government Resource
4	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-018
5	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12385
6	http://www.securityfocus.com/bid/47192
7	https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12385
8	https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-018
9	http://www.us-cert.gov/cas/techalerts/TA11-102A.html	US Government Resource
10	http://www.securitytracker.com/id?1025327

Common Vulnerabilities List

Configuration2		or higher	or less	more than	less than
cpe:2.3:a:microsoft:internet_explorer:7:::::::*
execution environment
1	cpe:2.3:o:microsoft:windows_2003_server::sp2::::::*
2	cpe:2.3:o:microsoft:windows_2003_server::sp2:itanium:::::
3	cpe:2.3:o:microsoft:windows_server_2003::sp2::::::*
4	cpe:2.3:o:microsoft:windows_server_2008:::itanium:::::*
5	cpe:2.3:o:microsoft:windows_server_2008:::x32:::::*
6	cpe:2.3:o:microsoft:windows_server_2008:::x64:::::*
7	cpe:2.3:o:microsoft:windows_server_2008::sp2:x32:::::
8	cpe:2.3:o:microsoft:windows_server_2008::sp2:x64:::::
9	cpe:2.3:o:microsoft:windows_server_2008:-:sp2:itanium:::::*
10	cpe:2.3:o:microsoft:windows_vista::sp1::::::*
11	cpe:2.3:o:microsoft:windows_vista::sp2::::::*
12	cpe:2.3:o:microsoft:windows_vista:-:sp2::::::
13	cpe:2.3:o:microsoft:windows_vista:-:sp1::::::
14	cpe:2.3:o:microsoft:windows_xp::sp3::::::*
15	cpe:2.3:o:microsoft:windows_xp:-:sp2:x64:::::*