Lucene search

K
cveMitreCVE-2005-2271
HistoryJul 13, 2005 - 4:00 a.m.

CVE-2005-2271

2005-07-1304:00:00
mitre
web.nvd.nist.gov
25
icab
2.9.8
javascript
dialog box
spoofing
phishing
vulnerability
nvd

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.002

Percentile

58.5%

iCab 2.9.8 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the “Dialog Origin Spoofing Vulnerability.”

Affected configurations

Nvd
Node
alexander_claussicabMatch2.9.8
VendorProductVersionCPE
alexander_claussicab2.9.8cpe:2.3:a:alexander_clauss:icab:2.9.8:*:*:*:*:*:*:*

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:H/Au:N/C:N/I:P/A:N

AI Score

6.5

Confidence

Low

EPSS

0.002

Percentile

58.5%

Related for CVE-2005-2271