NVD

Id
3347  
Name
CVE-2008-3473  
Description
Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy, and execute arbitrary code or obtain sensitive information, via a crafted HTML document, aka "Event Handling Cross-Domain Vulnerability."  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2008-10-14  
Modified Date
2012-01-26  
Seq
2008-3473  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
21067 3347 CVE-2008-3473 SSRT080143  View
21068 3347 CVE-2008-3473 oval:org.mitre.oval:def:13255  View
21069 3347 CVE-2008-3473 MS08-058  View
21070 3347 CVE-2008-3473 31616  View
21071 3347 CVE-2008-3473 1021047  View
21072 3347 CVE-2008-3473 TA08-288A  View
21073 3347 CVE-2008-3473 ADV-2008-2809  View
21074 3347 CVE-2008-3473 ie-event-security-bypass(45562)  View
21075 3347 CVE-2008-3473 win-ms08kb956390-update(45565)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
46548 JVNDB-2008-001858 Microsoft Internet Explorer におけるクロスドメインセキュリティポリシーを回避される脆弱性 Microsoft Internet Explorer には、Web スクリプト生成元のドメインまたはセキュリティゾーンを正しく決定しないため、クロスドメインセキュリティポリシーを回避される脆弱性が存在します。 CVE-2008-3473 33586 CVE-2008-3473 3347 9.3 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001858.html 2008-10-14 2008-11-17 View