CVE-2008-3474: Infoleak
Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy and obtain sensitive information via a crafted HTML document, aka "Cross-Domain Information Disclosure Vulnerability."
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-3474?
CVE-2008-3474 is classified as a critical vulnerability due to its potential for cross-domain information disclosure.
How do I fix CVE-2008-3474?
To remediate CVE-2008-3474, users should update to a patched version of Microsoft Internet Explorer or apply security updates provided by Microsoft.
Which versions of Internet Explorer are affected by CVE-2008-3474?
CVE-2008-3474 affects Microsoft Internet Explorer versions 5.01, 6, and 7.
What types of attacks can exploit CVE-2008-3474?
CVE-2008-3474 can be exploited through crafted HTML documents that bypass cross-domain security policies, allowing attackers to access sensitive information.
Is there a workaround for CVE-2008-3474?
While the best remedy is to update Internet Explorer, users may reduce risk by disabling script execution or using alternative browsers not affected by the vulnerability.