Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross-site scripting (XSS) vulnerability in Windows Vista Feed Headlines Gadget (aka Sidebar RSS Feeds Gadget) in Windows Vista allows user-assisted remote attackers to execute arbitrary code via an RSS feed with crafted HTML attributes, which are not properly removed and are rendered in the local zone.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Microsoft Vista侧栏RSS源小工具跨站脚本漏洞(MS07-048)
Vulnerability Description
Vista是微软发布的最新的操作系统。 Vista侧栏中的RSS源小工具中存在漏洞，远程攻击者可能利用此漏洞导致跨站脚本执行。 在解析RSS源中的某些单元时，可能会渲染单元中特制的HTML标签，导致注入JavaScript脚本。由于RSS源小工具是在本地区域中运行的，因此所注入的脚本可以获得对系统的完全访问。
CVSS Information
N/A
Vulnerability Type
N/A