CVE-2009-3003: Medium severity internet explorer vulnerability

Published Aug 28, 2009

Updated

Microsoft Internet Explorer 6 through 8 allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page.

Affected Software

3 affected components

Microsoft Internet Explorer=8

Microsoft Internet Explorer=7

Microsoft Internet Explorer=6

Event History

Aug 28, 2009

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2009-3003?

CVE-2009-3003 has a moderate severity rating due to its ability to allow attackers to spoof the address bar in Internet Explorer.

How do I fix CVE-2009-3003?

To fix CVE-2009-3003, users should update their version of Internet Explorer to the latest available version that addresses this vulnerability.

What versions of Internet Explorer are affected by CVE-2009-3003?

CVE-2009-3003 affects Internet Explorer versions 6, 7, and 8.

What type of attack does CVE-2009-3003 enable?

CVE-2009-3003 enables remote attackers to spoof the browser's address bar to display false URLs, potentially leading to phishing attacks.

Can CVE-2009-3003 affect user data?

While CVE-2009-3003 primarily focuses on spoofing the address bar, it can lead to scenarios where users unknowingly provide sensitive information to malicious sites.