NVD

Id
2843  
Name
CVE-2008-2949  
Description
Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to change the location property of a frame via the String data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with caballero-listener. NOTE: according to Microsoft, this is a duplicate of CVE-2008-2947, possibly a different attack vector.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-06-30  
Modified Date
2011-03-07  
Seq
2008-2949  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
18075 2843 CVE-2008-2949 http://blogs.zdnet.com/security/?p=1348  View
18076 2843 CVE-2008-2949 http://sirdarckcat.blogspot.com/2008/05/browsers-ghost-busters.html  View
18077 2843 CVE-2008-2949 http://technet.microsoft.com/en-us/security/cc405107.aspx#EHD  View
18078 2843 CVE-2008-2949 VU#516627  View
18079 2843 CVE-2008-2949 ADV-2008-1941  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46177 JVNDB-2008-001487 Microsoft Internet Explorer の文字列データ型処理におけるフレームのロケーション特性を変更される脆弱性 Microsoft Internet Explorer には、文字列データ型およびドメイン独立イベント を観察するための異なるドメインからのフレームの使用により、フレームのロケーション特性を変更される脆弱性が存在します。 CVE-2008-2949 33062 CVE-2008-2949 2843 6.8 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001487.html 2008-06-30 2008-11-12 View