Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 28/03/2008 Updated: 23/07/2021

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

The setRequestHeader method of the XMLHttpRequest object in Microsoft Internet Explorer 7 does not restrict the dangerous Transfer-Encoding HTTP request header, which allows remote malicious users to conduct HTTP request splitting and HTTP request smuggling attacks via a POST containing a "Transfer-Encoding: chunked" header and a request body with an incorrect chunk size.

Vulnerable Product	Search on Vulmon	Subscribe to Product
microsoft internet explorer 7.0
microsoft internet explorer 7.0.5730.11

CWE-20 http://www.mindedsecurity.com/MSA01240108.html http://secunia.com/advisories/29453 http://securityreason.com/securityalert/3786 http://www.vupen.com/english/advisories/2008/0980 https://exchange.xforce.ibmcloud.com/vulnerabilities/42804 http://www.securityfocus.com/archive/1/489960/100/0/threaded https://nvd.nist.gov

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-1545

Vulnerability Summary

References

Vulmon Search

About

Products

Connect