Microsoft Internet Explorer 6 allows remote attackers to spoof the URL bar, and page properties including SSL certificates, by interrupting page loading through certain use of location DOM objects and setTimeout calls. NOTE: this issue can be leveraged for phishing and other attacks.
References
Link | Resource |
---|---|
http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html | Broken Link |
http://lcamtuf.coredump.cx/ietrap2/ | Broken Link |
http://www.securityfocus.com/bid/24298 | Third Party Advisory VDB Entry |
http://securitytracker.com/id?1018193 | Third Party Advisory VDB Entry |
http://secunia.com/advisories/25564 | Not Applicable |
http://securityreason.com/securityalert/2781 | Exploit Third Party Advisory |
http://osvdb.org/45437 | Broken Link |
https://exchange.xforce.ibmcloud.com/vulnerabilities/34705 | VDB Entry |
http://www.securityfocus.com/archive/1/470446/100/0/threaded | Third Party Advisory VDB Entry |
Configurations
Configuration 1 (hide)
|
Information
Published : 2007-06-06 14:30
Updated : 2021-12-13 10:54
NVD link : CVE-2007-3092
Mitre link : CVE-2007-3092
JSON object : View
CWE
Products Affected
microsoft
- internet_explorer