CVE-2011-2383

CVE-2011-2383 describes a "cookiejacking" vulnerability in Microsoft Internet Explorer 9 and earlier versions. This flaw allows user-assisted remote attackers to read cookie files through improper restrictions on cross-zone drag-and-drop actions, specifically involving an IFRAME redirecting from an http: to a file: URL. The vulnerability has a CVSS score of 4.3 (Medium), indicating a network-based attack with medium complexity, requiring user interaction, and resulting in partial confidentiality impact. While the EPSS score suggests a higher than average likelihood of exploitation, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion beyond a single mention and media article from 2011.