CVE-2008-4788: Medium severity internet explorer vulnerability

Published Oct 29, 2008

Updated

Microsoft Internet Explorer 6 omits high-bit URL-encoded characters when displaying the address bar, which allows remote attackers to spoof the address bar via a URL with a domain name that differs from an important domain name only in these characters, as demonstrated by using exam%A9ple.com to spoof example.com, aka MSRC ticket MSRC7900.

Affected Software

1 affected component

Microsoft Internet Explorer=6

Event History

Oct 29, 2008

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-4788?

CVE-2008-4788 has been rated as a medium severity vulnerability.

How does CVE-2008-4788 impact users of Internet Explorer 6?

CVE-2008-4788 allows attackers to spoof the address bar, potentially leading to phishing attacks.

What versions of Internet Explorer are affected by CVE-2008-4788?

CVE-2008-4788 specifically affects Microsoft Internet Explorer 6.

How can I protect myself from CVE-2008-4788?

Users should upgrade to a newer version of Internet Explorer or switch to a different browser.

Is there a patch available for CVE-2008-4788?

There is no patch available for CVE-2008-4788, as it is an unpatched issue in an outdated browser.