CVE-2009-3008

CVE-2009-3008 describes a spoofing vulnerability in K-Meleon 1.5.3, where context-dependent attackers can manipulate the address bar to display an arbitrary file: URL. This occurs after a user has previously visited any file: URL, and can be triggered by an attacker-crafted file: document. The vulnerability has a CVSS score of 4.3 (medium severity), indicating a network-based attack with medium complexity, requiring user interaction, and resulting in partial integrity impact. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.