CVE-2008-3474

Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass…

Medium · published October 15, 2008

CVSS v3.1

6.5

EPSS

28%

Percentile

98.1

In the wild

Unconfirmed

What it is

Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy and obtain sensitive information via a crafted HTML document, aka "Cross-Domain Information Disclosure Vulnerability."

The record

Technical detail

CVSS v3.1: 6.5 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
CVSS v4.0: Not supplied
EPSS: 0.27980 · 98.1th percentile
Published: 2008-10-15T00:00Z

EPSS history

Timeline

15 OCT 00:00Z
Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass…
cvelistv5