CVE

Id
26838  
CVE No.
CVE-2007-3481  
Status
Candidate  
Description
** DISPUTED ** Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to bypass the Same Origin Policy and access restricted information from other domains via JavaScript that overwrites the document variable and statically sets the document.domain attribute. NOTE: this issue has been disputed by other researchers, citing a variable scoping issue and information about the semantics of document.domain.  
Phase
Assigned (20070628)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
273841 26838 CVE-2007-3481 MISC:http://www.0x000000.com/?i=371  View
273842 26838 CVE-2007-3481 BID:24704  View
273843 26838 CVE-2007-3481 URL:http://www.securityfocus.com/bid/24704  View
273844 26838 CVE-2007-3481 OSVDB:38953  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
57086 JVNDB-2007-005778 Research in Motion BlackBerry Enterprise Server におけるマルウェアを読み込む脆弱性 Research in Motion BlackBerry Enterprise Server は、BlackBerry のデバイス上で稼動する任意のサードパーティアプリケーションのインストールを許可するデフォルト設定があるため、マルウェアを読み込む脆弱性が存在します。 CVE-2007-3483 26838 10 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-005778.html  View