CVE

Id
40441  
CVE No.
CVE-2009-3006  
Status
Candidate  
Description
Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page.  
Phase
Assigned (20090828)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
444368 40441 CVE-2009-3006 MISC:http://lostmon.blogspot.com/2009/08/multiple-browsers-fake-url-folder-file.html  View
444369 40441 CVE-2009-3006 OVAL:oval:org.mitre.oval:def:6437  View
444370 40441 CVE-2009-3006 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:6437  View
444371 40441 CVE-2009-3006 XF:maxthon-windowopen-spoofing(53009)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
43894 JVNDB-2009-004901 Mozilla Firefox などにおけるクロスサイトスクリプティング (XSS) 攻撃を実行される脆弱性 Mozilla Firefox、SeaMonkey、および Mozilla は、HTTP レスポンス内の Refresh ヘッダの data: URI を適切にブロックしないため、クロスサイトスクリプティング (XSS) 攻撃を実行される脆弱性が存在します。 CVE-2009-3010 40441 4.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004901.html  View