Lucene search

K
cveMitreCVE-2008-4787
HistoryOct 29, 2008 - 3:31 p.m.

CVE-2008-4787

2008-10-2915:31:35
mitre
web.nvd.nist.gov
23
cve-2008-4787
microsoft internet explorer
remote attackers
spoofing
address bar
url
whitespace
msrc7899
cve-2003-1025
nvd

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.974

Percentile

99.9%

Visual truncation vulnerability in Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar via a URL with a hostname containing many   (Non-Blocking Space character) sequences, which are rendered as whitespace, aka MSRC ticket MSRC7899, a related issue to CVE-2003-1025.

Affected configurations

Nvd
Node
microsoftinternet_explorerMatch6
VendorProductVersionCPE
microsoftinternet_explorer6cpe:2.3:a:microsoft:internet_explorer:6:*:*:*:*:*:*:*

CVSS2

5.8

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:P/A:P

AI Score

6.3

Confidence

Low

EPSS

0.974

Percentile

99.9%