Lucene search
RootSSV:60616HistoryFeb 03, 2013 - 12:00 a.m.
Microsoft Internet Explorer地址栏 URI欺骗漏洞(CVE-2013-1451)
2013-02-0300:00:00
Root
www.seebug.org
12
0.064 Low
EPSS
Percentile
93.7%
Bugtraq ID:57641
CVE ID: CVE-2013-1451
Microsoft Internet Explorer是一款流行的WEB浏览器。
在Microsoft Internet Explorer代理服务设置中，如果HTTP和Secure栏中具有相同代理地址和端口，IE没有确保SSL锁定图标与地址栏一致，通过特制的HTML文档触发多个任意主机的HTTPS请求，随后提交一个可信主机的HTTPS请求，再向不可信主机发送一个HTTP请求，可欺骗WEB站点。
0
Microsoft Internet Explorer 9
Microsoft Internet Explorer 8
厂商解决方案
目前没有详细解决方案提供：
http://www.microsoft.com/windows/products/winfamily/ie/default.mspx
http://www.youtube.com/ChristianHaiderPoC
Related
seebug
seebug
Internet Explorer 8 & Internet Explorer 9 - Steal any Cookie
2014-07-01 00:00:00
exploitpack
exploitpack
Microsoft Internet Explorer 89 - Steal Any Cookie
2013-01-28 00:00:00
exploitdb
exploitdb
Microsoft Internet Explorer 8/9 - Steal Any Cookie
2013-01-28 00:00:00
cve
cve
CVE-2013-1451
2022-10-03 16:14:47
prion
prion
Design/Logic Flaw
2013-01-29 12:27:00
cvelist
cvelist
CVE-2013-1451
2022-10-03 16:14:47
openvas
openvas
nvd
nvd
CVE-2013-1451
2013-01-29 12:27:01