CVE		CVE-2008-3474
Статус		Candidate
Описание		Microsoft Internet Explorer 6 and 7 does not properly determine the domain or security zone of origin of web script, which allows remote attackers to bypass the intended cross-domain security policy and obtain sensitive information via a crafted HTML document, aka "Cross-Domain Information Disclosure Vulnerability."
Важность		Medium
CVSS score		4,3
CVSS vector		(AV:N/AC:M/Au:N/C:P/I:N/A:N)
Phase		Assigned (26.01.2012)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-3474
References		CERT : TA08-288A
		HP : HPSBST02379
		HP : SSRT080143
		MS : MS08-058
		SECTRACK : 1021047
		VUPEN : ADV-2008-2809
		XF : ie-script-origin-information-disclosure(45854)
		XF : win-ms08kb956390-update(45565)
SecurityVulns:		Многочисленные уязвимости безопасности в Microsoft Internet Explorer