CVE-2007-3826 in Microsoft Internet Explorer
Summary
Microsoft Internet Explorer 7 on Windows XP SP2 allows remote attackers to prevent users from leaving a site, spoof the address bar, and conduct phishing and other attacks via repeated document.open function calls after a user requests a new page, but before the onBeforeUnload function is called.
Reservation
07/17/2007
Disclosure
07/17/2007
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 37860 | Microsoft Internet Explorer Address Bar document.open authentication spoofing | 290 | Proof-of-Concept | Official fix | CVE-2007-3826 |