CVE-2008-3473

EPSS 47.04%
Published 15.10.2008 00:12:15
Last modified 09.04.2025 00:30:58
Source secure@microsoft.com
Teams watchlist Login
Open Login

Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy, and execute arbitrary code or obtain sensitive information, via a crafted HTML document, aka "Event Handling Cross-Domain Vulnerability."

Affected products Warnungen 0 Metrics 2 CWE 0 References 12

Data is provided by the National Vulnerability Database (NVD)

Microsoft ≫ Internet Explorer Version5.01 Updatesp4

Microsoft ≫ Windows 2000 Version- Updatesp4

Microsoft ≫ Internet Explorer Version6

Microsoft ≫ Internet Explorer Version6 Updatesp1

Microsoft ≫ Windows 2000 Version- Updatesp4

Microsoft ≫ Internet Explorer Version7

   Microsoft ≫ Windows Server 2003 Version- Updatesp1
   Microsoft ≫ Windows Server 2003 Version- Updatesp1 HwPlatformitanium
   Microsoft ≫ Windows Server 2003 Version- Updatesp1 HwPlatformx64
   Microsoft ≫ Windows Server 2003 Version- Updatesp2
   Microsoft ≫ Windows Server 2008 Version- HwPlatformitanium
   Microsoft ≫ Windows Server 2008 Version- Editionx64
   Microsoft ≫ Windows Server 2008 Version- Editionx86
   Microsoft ≫ Windows Vista Version- Updategold
   Microsoft ≫ Windows Vista Version- Updategold HwPlatformx64
   Microsoft ≫ Windows Vista Version- Updatesp1
   Microsoft ≫ Windows Vista Version- Updatesp1 HwPlatformx64
   Microsoft ≫ Windows Xp Version- Updategold SwEditionprofessional HwPlatformx64
   Microsoft ≫ Windows Xp Version- Updatesp2
   Microsoft ≫ Windows Xp Version- Updatesp2 SwEditionprofessional HwPlatformx64
   Microsoft ≫ Windows Xp Version- Updatesp3

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.