CVE-2007-5158

MEDIUM 4.3CVE-2007-5158 · Published 01/10/2007 · updated 16/06/2026

Package	Affected versions	Patched versions
internet explorer microsoft	`= 6.0`	No fix yet

Description

The focus handling for the onkeydown event in Microsoft Internet Explorer 6.0 allows remote attackers to change field focus and copy keystrokes via a certain use of a JavaScript htmlFor attribute, as demonstrated by changing focus from a textarea to a file upload field, a related issue to CVE-2007-3511.

References

osvdb.org/41382 · Broken Link
secunia.com/advisories/27007 · Vendor Advisory
0x000000.com/index.php · Not Applicable
securityfocus.com/bid/25836 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/36848 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free