CVE-2008-4787: Microsoft Internet Explorer

Medium severity, CVSS 5.8. EPSS: 13.6% chance of exploitation in the next 30 days.

Visual truncation vulnerability in Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar via a URL with a hostname containing many   (Non-Blocking Space character) sequences, which are rendered as whitespace, aka MSRC ticket MSRC7899, a related issue to CVE-2003-1025.

Affected products

• Microsoft Internet Explorer: version 6 only

Published 2008-10-29. Last modified 2026-06-16.