CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.5. It affects Microsoft. Its EPSS score suggests a 28.0% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2008-3474
Severity
MEDIUM
CVSS
6.5
EPSS
27.98%
Microsoft
Original NVD Description
Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy and obtain sensitive information via a crafted HTML document, aka "Cross-Domain Information Disclosure Vulnerability."