Lucene search

K
cve[email protected]CVE-2006-1626
HistoryApr 05, 2006 - 10:04 a.m.

CVE-2006-1626

2006-04-0510:04:00
CWE-20
web.nvd.nist.gov
34
2
internet explorer
address bar spoofing
phishing
cve-2006-1626
nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.951 High

EPSS

Percentile

99.3%

Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading. NOTE: this is a different vulnerability than CVE-2006-1192.

Affected configurations

NVD
Node
microsoftinternet_explorerMatch6.0
AND
microsoftwindows_xpsp2

References

Social References

More

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

Low

0.951 High

EPSS

Percentile

99.3%