Security Advisory
CVE-2011-1245
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Microsoft Internet Explorer 6 and 7 does not properly restrict script access to content from a (1) different domain or (2) different zone, which allows remote attackers to obtain sensitive information via a crafted web site, aka "Javascript Information Disclosure Vulnerability."