CVE-2008-2947: Medium severity internet explorer vulnerability
Cross-domain vulnerability in Microsoft Internet Explorer 5.01 SP4, 6, and 7 allows remote attackers to access restricted information from other domains via JavaScript that uses the Object data type for the value of a (1) location or (2) location.href property, related to incorrect determination of the origin of web script, aka "Window Location Property Cross-Domain Vulnerability." NOTE: according to Microsoft, CVE-2008-2948 and CVE-2008-2949 are duplicates of this issue, probably different attack vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-2947?
CVE-2008-2947 is considered a moderate severity vulnerability due to its cross-domain impact.
How do I fix CVE-2008-2947?
Fixing CVE-2008-2947 involves updating Internet Explorer to a more secure version or applying relevant patches provided by Microsoft.
Which versions of Internet Explorer are affected by CVE-2008-2947?
CVE-2008-2947 affects Internet Explorer versions 5.01 SP4, 6, and 7.
Can CVE-2008-2947 lead to data leakage?
Yes, CVE-2008-2947 can enable remote attackers to access restricted information from other domains, potentially leading to data leakage.
What type of attacks can be executed using CVE-2008-2947?
CVE-2008-2947 can be exploited in cross-site scripting attacks, allowing attackers to manipulate JavaScript to access sensitive data.