Signature Detail

HTTP: Microsoft toStaticHTML API Information Disclosure Vulnerability

This signature detects attempts to exploit a known vulnerability against Microsoft toStaticHTML API. A successful attack can result in the attacker gaining unauthorized information about the target system without the victim's knowledge.

Extended Description

Microsoft Internet Explorer is prone to an information-disclosure vulnerability that affects the 'toStaticHTML' API. Attackers can exploit this issue to obtain sensitive information that may aid in further attacks.

Affected Products

• Avaya aura_conferencing 6.0 Standard
• Avaya callpilot 4.0
• Avaya callpilot 5.0
• Avaya communication_server_1000_telephony_manager 3.0
• Avaya communication_server_1000_telephony_manager 4.0
• Avaya meeting_exchange 5.0
• Avaya meeting_exchange 5.0.0.0.52
• Avaya meeting_exchange 5.0 SP1
• Avaya meeting_exchange 5.0 SP2
• Avaya meeting_exchange 5.1
• Avaya meeting_exchange 5.1 SP1
• Avaya meeting_exchange 5.2
• Avaya meeting_exchange 5.2 SP1
• Avaya meeting_exchange 5.2 SP2
• Avaya meeting_exchange-client_registration_server
• Avaya meeting_exchange-recording_server
• Avaya meeting_exchange-streaming_server
• Avaya meeting_exchange-web_conferencing_server
• Avaya meeting_exchange-webportal
• Avaya messaging_application_server 4
• Avaya messaging_application_server 5
• Avaya messaging_application_server 5.2
• Microsoft groove_server_2010 SP1
• Microsoft groove_server_2010
• Microsoft internet_explorer 7.0
• Microsoft internet_explorer 7.0
• Microsoft internet_explorer 8
• Microsoft sharepoint_foundation_2010 SP1
• Microsoft sharepoint_foundation_2010
• Microsoft sharepoint_server_2007 SP2
• Microsoft sharepoint_server_2007_x64 SP2
• Microsoft sharepoint_server_2010 SP1
• Microsoft sharepoint_server_2010_enterprise_edition
• Microsoft sharepoint_server_2010_standard_edition
• Microsoft sharepoint_services 3.0 SP2
• Microsoft sharepoint_services_64-bit 3.0 SP2

References

• BugTraq: 48199
• CVE: CVE-2011-1252