CVE-2007-5158 The focus handling for the onkeydown event in Microsoft Internet Explorer 6.0 allows remote attackers to change field focus and copy keystrokes via a certain use of a JavaScript htmlFor attribute, as....
MediumCVSS 4.3
EPSS 15.0%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The focus handling for the onkeydown event in Microsoft Internet Explorer 6.0 allows remote attackers to change field focus and copy keystrokes via a certain use of a JavaScript htmlFor attribute, as demonstrated by changing focus from a textarea to a file upload field, a related issue to CVE-2007-3511.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 6.0 | No fix listed |
References
- 41382 broken-link vdb-entry
- 27007 third-party-advisory vendor-advisory
- www.0x000000.com not-applicable
- 25836 third-party-advisory vdb-entry
- ie-onkeydown-information-disclosure(36848) third-party-advisory vdb-entry