NVD

Id
2842  
Name
CVE-2008-2948  
Description
Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location property of a frame via the Object data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with caballero-listener. NOTE: according to Microsoft, this is a duplicate of CVE-2008-2947, possibly a different attack vector.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-06-30  
Modified Date
2011-03-07  
Seq
2008-2948  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
18069 2842 CVE-2008-2948 http://blogs.zdnet.com/security/?p=1348  View
18070 2842 CVE-2008-2948 http://sirdarckcat.blogspot.com/2008/05/ghosts-for-ie8-and-ie75730.html  View
18071 2842 CVE-2008-2948 http://technet.microsoft.com/en-us/security/cc405107.aspx#EHD  View
18072 2842 CVE-2008-2948 http://www.gnucitizen.org/blog/ghost-busters/  View
18073 2842 CVE-2008-2948 VU#516627  View
18074 2842 CVE-2008-2948 ADV-2008-1941  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46176 JVNDB-2008-001486 Microsoft Internet Explorer のオブジェクトデータ型処理におけるフレームのロケーション特性を変更される脆弱性 Microsoft Internet Explorer には、オブジェクトデータ型およびドメイン独立イベントを観察するための異なるドメインからのフレームの使用により、フレームのロケーション特性を変更される脆弱性が存在します。 CVE-2008-2948 33061 CVE-2008-2948 2842 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001486.html 2008-06-30 2008-11-12 View