Microsoft Internet Explorer 6 SV 1 XHTML Comment User Confirmation Bypass

Medium Log Correlation Engine Plugin ID 800806


The remote host is vulnerable to a script injection attack.


The remote host is running Internet Explorer 6 SV1, the version that is part of Windows XP SP2. It is reported that the user confirmation asked before to load client-side JavaScript and ActiveX embedded in web pages can be trivially bypassed. An attacker may run malicious script on the remote host.


Upgrade or patch according to vendor recommendations.

Plugin Details

Severity: Medium

ID: 800806

File Name: 800806.prm

Family: Web Clients

Risk Information

Risk Factor: Medium


Base Score: 2.9

Temporal Score: 2.9

Vector: CVSS2#AV:A/AC:M/Au:N/C:N/I:P/A:N

Temporal Vector: CVSS2#E:H/RL:U/RC:ND

Reference Information

CVE: CVE-2004-1686

BID: 11200