CVE-2009-3006 - CVE House
Back to Database
Status published Medium CVE-2009-3006

Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the...

Vulnerability Description

Maxthon Browser 2.5.3.80 UNICODE allows remote attackers to spoof the address bar, via window.open with a relative URI, to show an arbitrary URL on the web site visited by the victim, as demonstrated by a visit to an attacker-controlled web page, which triggers a spoofed login form for the site containing that page.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2009-3006

Credits & Attribution

No credits recorded in the NVD database.

References

More from maxthon

View All →
CVE-2019-16647
Unquoted Search Path in Maxthon 5.1.0 to 5.2.7 Browser for...
High 7.2
CVE-2014-1449
The Maxthon Cloud Browser application before 4.1.6.2000 for Android allows...
Medium 5
CVE-2010-5246
Multiple untrusted search path vulnerabilities in Maxthon Browser 1.6.7.35 and...
Medium 6.9
CVE-2009-3018
Maxthon Browser 3.0.0.145 Alpha with Ultramode does not properly block...
Medium 4.3
CVE-2008-3667
Stack-based buffer overflow in Maxthon Browser 2.0 and earlier allows...
Medium 6.8

Affected Vendor

Affected Software

maxthon browser
Vulnerable Versions:
2.5.3.80

Timeline

Official Publish: August 28th, 2009
Last Modified: August 7th, 2024
Added to House: July 19th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.