VYPR
Get started
← All advisories
Unrated severityNVD Advisory· Published Jun 8, 2010· Updated Apr 29, 2026

CVE-2010-1257

CVE-2010-1257

Description

Cross-site scripting (XSS) vulnerability in the toStaticHTML API, as used in Microsoft Office InfoPath 2003 SP3, 2007 SP1, and 2007 SP2; Office SharePoint Server 2007 SP1 and SP2; SharePoint Services 3.0 SP1 and SP2; and Internet Explorer 8 allows remote attackers to inject arbitrary web script or HTML via vectors related to sanitization.

Affected products

12
  • Microsoft/Internet Explorer
    cpe:2.3:a:microsoft:internet_explorer:8:*:*:*:*:*:*:*
  • Microsoft/Office Infopath3 versions
    cpe:2.3:a:microsoft:office_infopath:2003:sp3:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:microsoft:office_infopath:2003:sp3:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office_infopath:2007:sp1:*:*:*:*:*:*
    • cpe:2.3:a:microsoft:office_infopath:2007:sp2:*:*:*:*:*:*
  • Microsoft/Sharepoint Server4 versions
    cpe:2.3:a:microsoft:sharepoint_server:2007:sp1:x32:*:*:*:*:*+ 3 more
    • cpe:2.3:a:microsoft:sharepoint_server:2007:sp1:x32:*:*:*:*:*
    • cpe:2.3:a:microsoft:sharepoint_server:2007:sp1:x64:*:*:*:*:*
    • cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:x32:*:*:*:*:*
    • cpe:2.3:a:microsoft:sharepoint_server:2007:sp2:x64:*:*:*:*:*
  • Microsoft/Sharepoint Services4 versions
    cpe:2.3:a:microsoft:sharepoint_services:3.0:sp1:x32:*:*:*:*:*+ 3 more
    • cpe:2.3:a:microsoft:sharepoint_services:3.0:sp1:x32:*:*:*:*:*
    • cpe:2.3:a:microsoft:sharepoint_services:3.0:sp1:x64:*:*:*:*:*
    • cpe:2.3:a:microsoft:sharepoint_services:3.0:sp2:x32:*:*:*:*:*
    • cpe:2.3:a:microsoft:sharepoint_services:3.0:sp2:x64:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

7

News mentions

0

No linked articles in our index yet.