CVE-2009-2057

CVE-2009-2057 describes a vulnerability in Microsoft Internet Explorer versions prior to 8, where the browser incorrectly uses the HTTP Host header in 4xx or 5xx CONNECT responses from a proxy server. This flaw allows man-in-the-middle attackers to execute arbitrary web script, a technique referred to as "SSL tampering." The vulnerability has a CVSS score of 5.8, indicating a medium severity with a network attack vector, medium attack complexity, and potential for partial confidentiality and integrity impact. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.