CVE-2008-2948

Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location property of a frame via the Object data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with caballero-listener. NOTE: according to Microsoft, this is a duplicate of CVE-2008-2947, possibly a different attack vector.

• http://blogs.zdnet.com/security/?p=1348
• http://secunia.com/advisories/30851Vendor Advisory
• http://sirdarckcat.blogspot.com/2008/05/ghosts-for-ie8-and-ie75730.html
• http://technet.microsoft.com/en-us/security/cc405107.aspx#EHD
• http://www.gnucitizen.org/blog/ghost-busters/
• http://www.kb.cert.org/vuls/id/516627US Government Resource
• http://www.vupen.com/english/advisories/2008/1941/references
• http://blogs.zdnet.com/security/?p=1348
• http://secunia.com/advisories/30851Vendor Advisory
• http://sirdarckcat.blogspot.com/2008/05/ghosts-for-ie8-and-ie75730.html
• http://technet.microsoft.com/en-us/security/cc405107.aspx#EHD
• http://www.gnucitizen.org/blog/ghost-busters/
• http://www.kb.cert.org/vuls/id/516627US Government Resource
• http://www.vupen.com/english/advisories/2008/1941/references

Published

Jun 30, 2008

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2008-2942Directory traversal vulnerability in patch.py in Mercurial 1…
• CVE-2008-2943Double free vulnerability in IBM Tivoli Directory Server (TD…
• CVE-2008-2944Double free vulnerability in the utrace support in the Linux…
• CVE-2008-2945Sun Java System Access Manager 6.3 through 7.1 and Sun Java …
• CVE-2008-2946The SNMP-DMI mapper subagent daemon (aka snmpXdmid) in Solst…
• CVE-2008-2947Cross-domain vulnerability in Microsoft Internet Explorer 5.…
• CVE-2008-2949Cross-domain vulnerability in Microsoft Internet Explorer 6 …
• CVE-2008-2950The Page destructor in Page.cc in libpoppler in Poppler 0.8.…
• CVE-2008-2951Open redirect vulnerability in the search script in Trac bef…6.1
• CVE-2008-2952liblber/io.c in OpenLDAP 2.2.4 to 2.4.10 allows remote attac…
• CVE-2008-2953Linux DC++ (linuxdcpp) before 0.707 allows remote attackers …
• CVE-2008-2954client/NmdcHub.cpp in Linux DC++ (linuxdcpp) before 0.707 al…