Microsoft Internet Explorer 6 allows remote attackers to spoof the URL bar, and page properties including SSL certificates, by interrupting page loading through certain use of location DOM objects and setTimeout calls.  NOTE: this issue can be leveraged for phishing and other attacks.
                
            References
                    | Link | Resource | 
|---|---|
| http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html | Broken Link | 
| http://lcamtuf.coredump.cx/ietrap2/ | Broken Link | 
| http://www.securityfocus.com/bid/24298 | Third Party Advisory VDB Entry | 
| http://securitytracker.com/id?1018193 | Third Party Advisory VDB Entry | 
| http://secunia.com/advisories/25564 | Not Applicable | 
| http://securityreason.com/securityalert/2781 | Exploit Third Party Advisory | 
| http://osvdb.org/45437 | Broken Link | 
| https://exchange.xforce.ibmcloud.com/vulnerabilities/34705 | VDB Entry | 
| http://www.securityfocus.com/archive/1/470446/100/0/threaded | Third Party Advisory VDB Entry | 
Configurations
                    Configuration 1 (hide)
                                
                                
  | 
                        
Information
                Published : 2007-06-06 14:30
Updated : 2021-12-13 10:54
NVD link : CVE-2007-3092
Mitre link : CVE-2007-3092
JSON object : View
CWE
                Products Affected
                microsoft
- internet_explorer
 


