5
CVSSv2

CVE-2007-3481

Published: 28/06/2007 Updated: 17/05/2024
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 445
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Cross-domain vulnerability in Microsoft Internet Explorer 6 and 7 allows remote malicious users to bypass the Same Origin Policy and access restricted information from other domains via JavaScript that overwrites the document variable and statically sets the document.domain attribute. NOTE: this issue has been disputed by other researchers, citing a variable scoping issue and information about the semantics of document.domain

Vulnerable Product Search on Vulmon Subscribe to Product

microsoft internet explorer 7

microsoft internet explorer 6