What’s Vulnerable › Vulnerabilities

CVE-2009-2057

• Severity: medium (CVSS 5.8 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.0% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2009-06-15 · updated 2026-06-16
• Weakness: CWE-287

Description

Microsoft Internet Explorer before 8 uses the HTTP Host header to determine the context of a document provided in a (1) 4xx or (2) 5xx CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying this CONNECT response, aka an "SSL tampering" attack.

Affected products

• Microsoft Ie: 5.0-sp1, 5.0-sp4, 5.22, 6.0-sp1, 6.0-sp2
• Microsoft Internet Explorer 11: 3.0, 3.0.1, 3.0.2, 3.1, 3.2, 4.0 (+83)

References

• http://research.microsoft.com/apps/pubs/default.aspx?id=79323
• http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf
• http://research.microsoft.com/apps/pubs/default.aspx?id=79323
• http://research.microsoft.com/pubs/79323/pbp-final-with-update.pdf

Get alerted when CVE-2009-2057 or the next vulnerability affects your stack