Microsoft Browser Information Disclosure Vulnerability

<p>An information disclosure vulnerability exists when affected Microsoft browsers improperly allow cross-frame interaction. An attacker who successfully exploited this vulnerability could allow an attacker to obtain browser frame or window state from a different domain.</p> <p>For an attack to be successful, an attacker must persuade a user to open a malicious website from a secure website.</p> <p>This update addresses the vulnerability by denying permission to read the state of the object model, to which frames or windows on different domains should not have access.</p>

Where it's fixed