CVE-2011-4689

MEDIUM 5.0CVE-2011-4689 · Published 07/12/2011 · updated 16/06/2026

In short

CVE-2011-4689 is a MEDIUM (CVSS 5.0) vulnerability affecting internet explorer (microsoft).
Chance of exploitation in the next 30 days (EPSS): 9.4%, higher than 95.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
internet explorer microsoft	`= 6= 7= 8= 9`	No fix yet

Description

Microsoft Internet Explorer 6 through 9 does not prevent capture of data about the times of Same Origin Policy violations during IFRAME loading attempts, which makes it easier for remote attackers to determine whether a document exists in the browser cache via crafted JavaScript code.

References

lcamtuf.coredump.cx/cachetime · Exploit
secunia.com/advisories/47129 · Vendor Advisory

More vulnerabilities in internet explorer

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free