CVE		CVE-2008-2947
Status		Candidate
Description		Cross-domain vulnerability in Microsoft Internet Explorer 6 allows remote attackers to access restricted information from other domains via JavaScript that uses the Object data type for the value of a (1) location or (2) location.href property.
Phase		Assigned (30.06.2008)
NVD:		http://nvd.nist.gov/nvd.cfm?cvename=CVE-2008-2947
References		BID : 29960
		CERT-VN : VU#923508
		FRSIRT : ADV-2008-1940
		MISC : http://blogs.zdnet.com/security/?p=1348
		MISC : http://www.ph4nt0m.org-a.googlepages.com/PSTZine_0...
		SECTRACK : 1020382
		SECUNIA : 30857
		XF : ie-location-locationhref-security-bypass(43366)
SecurityVulns:		Microsoft Internet Explorer multiple security vulnerabilities