Lucene search

K
cve[email protected]CVE-2006-5913
HistoryNov 15, 2006 - 3:07 p.m.

CVE-2006-5913

2006-11-1515:07:00
web.nvd.nist.gov
23
microsoft
internet explorer
vulnerability
security certificate
remote attack
cve-2006-5913
nvd

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

6.5 Medium

AI Score

Confidence

High

0.059 Low

EPSS

Percentile

93.5%

Microsoft Internet Explorer 7 allows remote attackers to (1) cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/sslnavcancel.htm with the target site in the anchor identifier, which displays the site’s URL in the address bar but causes Internet Explorer to report that the certificate is invalid, or (2) trigger a “The webpage no longer exists” report via a link to res://ieframe.dll/http_410.htm, a variant of CVE-2006-5805.

Affected configurations

NVD
Node
microsoftieMatch7.0vista
CPENameOperatorVersion
microsoft:iemicrosoft ieeq7.0

6.4 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:P/A:P

6.5 Medium

AI Score

Confidence

High

0.059 Low

EPSS

Percentile

93.5%

Related for CVE-2006-5913