Lucene search
HistoryJul 17, 2005 - 4:00 a.m.
CVE-2004-2219
microsoft
internet explorer
phishing
cve-2004-2219
nullyfake
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
High
0.597 Medium
EPSS
Percentile
97.8%
Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javascript that uses an invalid URI, modifies the Location field, then uses history.back to navigate to the previous domain, aka NullyFake.
Affected configurations
Node
microsoftieMatch6.0sp1
ORmicrosoftinternet_explorerMatch5.01
ORmicrosoftinternet_explorerMatch5.5
ORmicrosoftinternet_explorerMatch6.0
Related
cvelist
cvelist
CVE-2004-2219
2005-07-17 04:00:00
checkpoint_advisories
checkpoint_advisories
Microsoft Internet Explorer Address Bar Spoofing (CVE-2004-2219)
2015-10-18 00:00:00
nvd
nvd
CVE-2004-2219
2004-12-31 05:00:00
2.6 Low
CVSS2
Attack Vector
NETWORK
Attack Complexity
HIGH
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:H/Au:N/C:N/I:P/A:N
6.6 Medium
AI Score
Confidence
High
0.597 Medium
EPSS
Percentile
97.8%
Related for CVE-2004-2219