CVE-2008-2948

Microsoft Internet Explorer 7-8 - XSS

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-2948.

AI-analyzed exploit summary This JavaScript exploit bypasses the same-origin policy in Microsoft Internet Explorer by manipulating the location of a frame from a different domain, allowing arbitrary code execution in the context of the parent document. It leverages a timing-based attack to override the frame's location object with a malicious toString function.

Description

Cross-domain vulnerability in Microsoft Internet Explorer 7 and 8 allows remote attackers to change the location property of a frame via the Object data type, and use a frame from a different domain to observe domain-independent events, as demonstrated by observing onkeydown events with caballero-listener. NOTE: according to Microsoft, this is a duplicate of CVE-2008-2947, possibly a different attack vector.

Exploits (1)

exploitdb WORKING POC
remotewindows
https://www.exploit-db.com/exploits/31996

This JavaScript exploit bypasses the same-origin policy in Microsoft Internet Explorer by manipulating the location of a frame from a different domain, allowing arbitrary code execution in the context of the parent document. It leverages a timing-based attack to override the frame's location object with a malicious toString function.

Classification
Working Poc 90%
Attack Type
Xss
Complexity
Moderate
Reliability
Reliable
Target: Microsoft Internet Explorer 6, 7, and 8 Beta 1
No auth needed
Prerequisites: Victim must visit a malicious webpage or have a vulnerable IE session open
MITRE ATT&CK
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (7)

Core 7
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30851
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2008/1941/references
US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/516627
Various Sources x_refsource_misc
http://www.gnucitizen.org/blog/ghost-busters/
Various Sources x_refsource_misc
http://blogs.zdnet.com/security/?p=1348

Scores

EPSS 0.2544
EPSS Percentile 97.7%

Details

Status published
Products (2)
microsoft/internet_explorer 7
microsoft/internet_explorer 8
Published Jun 30, 2008
Tracked Since Feb 18, 2026