What is the severity of CVE-2008-2949?

CVE-2008-2949 is classified as a medium to high severity vulnerability due to its potential to allow unauthorized access to sensitive information across domains.

How do I fix CVE-2008-2949?

To fix CVE-2008-2949, upgrade your Microsoft Internet Explorer to the latest version or apply the security patches provided by Microsoft.

What types of systems are affected by CVE-2008-2949?

CVE-2008-2949 affects Microsoft Internet Explorer versions 6 and 7.

Can CVE-2008-2949 lead to data theft?

Yes, CVE-2008-2949 can potentially allow attackers to observe sensitive information leading to data theft.

Is CVE-2008-2949 still a threat today?

While CVE-2008-2949 was relevant in the past, its threat level has decreased significantly as Internet Explorer 6 and 7 are no longer widely used.

Vulnerability/
CVE-2008-2949

medium

6.8

CWE

NVD-CWE-Other

30/6/2008

7/8/2024

CVE-2008-2949

First published: Mon Jun 30 2008(Updated: )

Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote attackers to change the location property of a frame via the String data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with caballero-listener. NOTE: according to Microsoft, this is a duplicate of CVE-2008-2947, possibly a different attack vector.

Credit: cve@mitre.org

Affected Software	Affected Version	How to fix
Internet Explorer	=7
Internet Explorer	=6

Never miss a vulnerability like this again

Reference Links

Frequently Asked Questions

What is the severity of CVE-2008-2949?
CVE-2008-2949 is classified as a medium to high severity vulnerability due to its potential to allow unauthorized access to sensitive information across domains.
How do I fix CVE-2008-2949?
To fix CVE-2008-2949, upgrade your Microsoft Internet Explorer to the latest version or apply the security patches provided by Microsoft.
What types of systems are affected by CVE-2008-2949?
CVE-2008-2949 affects Microsoft Internet Explorer versions 6 and 7.
Can CVE-2008-2949 lead to data theft?
Yes, CVE-2008-2949 can potentially allow attackers to observe sensitive information leading to data theft.
Is CVE-2008-2949 still a threat today?
While CVE-2008-2949 was relevant in the past, its threat level has decreased significantly as Internet Explorer 6 and 7 are no longer widely used.

agent/type
agent/softwarecombine
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/author
agent/weakness
agent/references
agent/severity
agent/event
agent/description
agent/first-publish-date
agent/source
agent/tags
collector/nvd-historical
agent/software-canonical-lookup-request
collector/nvd-index
vendor/microsoft
canonical/internet explorer
version/internet explorer/7
version/internet explorer/6

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.