CVE-2008-4787: Medium severity internet explorer vulnerability

Published Oct 29, 2008

Updated

Visual truncation vulnerability in Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar via a URL with a hostname containing many   (Non-Blocking Space character) sequences, which are rendered as whitespace, aka MSRC ticket MSRC7899, a related issue to CVE-2003-1025.

Affected Software

1 affected component

Microsoft Internet Explorer=6

Event History

Oct 29, 2008

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-4787?

CVE-2008-4787 has a severity rating that indicates a significant risk of spoofing attacks in Microsoft Internet Explorer 6.

How does CVE-2008-4787 affect users of Internet Explorer 6?

CVE-2008-4787 allows remote attackers to spoof the address bar, potentially misleading users about the authenticity of the website they are visiting.

What versions of Internet Explorer are impacted by CVE-2008-4787?

CVE-2008-4787 specifically affects Microsoft Internet Explorer 6.

What can be done to mitigate the risks of CVE-2008-4787?

To mitigate the risks of CVE-2008-4787, users should upgrade to a newer, more secure browser version that is not susceptible to this vulnerability.

When was CVE-2008-4787 discovered?

CVE-2008-4787 was identified in 2008 and is related to previous vulnerabilities in Internet Explorer.