NVD

Id
55970  
Name
CVE-2007-3826  
Description
Microsoft Internet Explorer 7 on Windows XP SP2 allows remote attackers to prevent users from leaving a site, spoof the address bar, and conduct phishing and other attacks via repeated document.open function calls after a user requests a new page, but before the onBeforeUnload function is called.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-07-17  
Modified Date
2011-03-07  
Seq
2007-3826  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
284756 55970 CVE-2007-3826 http://lcamtuf.coredump.cx/ietrap3/  View
284757 55970 CVE-2007-3826 oval:org.mitre.oval:def:2324  View
284758 55970 CVE-2007-3826 2892  View
284759 55970 CVE-2007-3826 1018788  View
284760 55970 CVE-2007-3826 MS07-057  View
284761 55970 CVE-2007-3826 20070713 MSIE7 entrapment again (+ FF tidbit)  View
284762 55970 CVE-2007-3826 SSRT071480  View
284763 55970 CVE-2007-3826 24911  View
284764 55970 CVE-2007-3826 TA07-282A  View
284765 55970 CVE-2007-3826 ADV-2007-2540  View
284766 55970 CVE-2007-3826 ie-open-addressbar-spoofing(35421)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
52097 JVNDB-2007-000760 Microsoft Internet Explorer の document.open() 関数に関するアドレスバーを偽装される脆弱性 Microsoft Internet Explorer は、ユーザが新しいページをリクエストをした後、document.open() 関数を繰り返し呼び出すことでアドレスバーに表示される URL を偽装される脆弱性が存在します。 CVE-2007-3826 27181 CVE-2007-3826 55970 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000760.html 2007-07-17 2007-10-19 View