NVD

Id
5643  
Name
CVE-2008-5912  
Description
An unspecified function in the JavaScript implementation in Microsoft Internet Explorer creates and exposes a "temporary footprint" when there is a current login to a web site, which makes it easier for remote attackers to trick a user into acting upon a spoofed pop-up message, aka an "in-session phishing attack." NOTE: as of 20090116, the only disclosure is a vague pre-advisory with no actionable information. However, because it is from a well-known researcher, it is being assigned a CVE identifier for tracking purposes.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:N/AC:H/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-03  
Published
2009-01-20  
Modified Date
2009-01-29  
Seq
2008-5912  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
34904 5643 CVE-2008-5912 http://arstechnica.com/news.ars/post/20090113-new-method-of-phishmongering-could-fool-experienced-users.html  View
34905 5643 CVE-2008-5912 http://www.darkreading.com/security/attacks/showArticle.jhtml?articleID=212900161  View
34906 5643 CVE-2008-5912 http://www.infoworld.com/article/09/01/13/Browser_bug_could_allow_phishing_without_email_1.html  View
34907 5643 CVE-2008-5912 33276  View
34908 5643 CVE-2008-5912 http://www.trusteer.com/files/In-session-phishing-advisory-2.pdf  View
34909 5643 CVE-2008-5912 multiple-browser-js-weak-security(48173)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
40685 JVNDB-2009-001691 Microsoft Internet Explorer の JavaScript インプリメンテーションにおける偽装したポップアップメッセージに従って行動させられる脆弱性 Microsoft Internet Explorer の JavaScriptインプリメンテーションの関数は、Web サイトにログインしているユーザが存在する場合、"temporary footprint" を作成し公開するため、ユーザは偽装されたポップアップメッセージに従って行動させられる脆弱性が存在します。 CVE-2008-5912 36025 CVE-2008-5912 5643 2.1 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001691.html 2009-01-20 2009-07-08 View