CVE-2009-3003

CVE-2009-3003 describes a spoofing vulnerability in Microsoft Internet Explorer versions 6 through 8, allowing remote attackers to manipulate the address bar display. By using window.open with a relative URI, an attacker could trick users into believing they are on a legitimate site, potentially leading to credential theft via spoofed login forms. This vulnerability has a CVSS score of 4.3, indicating a medium attack complexity and partial integrity impact, but no confidentiality or availability impact. There is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this decade-old vulnerability.