CVE-2008-2948

Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location property of a frame via the Object data type…

published June 30, 2008

CVSS
—
EPSS
25%
Percentile
97.9
In the wild
Unconfirmed
What it is

Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location property of a frame via the Object data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with caballero-listener. NOTE: according to Microsoft, this is a duplicate of CVE-2008-2947, possibly a different attack vector.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.25438 · 97.9th percentile
Published
2008-06-30T22:00Z
EPSS history
Timeline
  • 30 JUN 22:00Z
    Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location property of a frame via the Object data type…
    cvelistv5