[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

250038

 
 

909

 
 

195843

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CVE
view JSON

CVE-2004-0843Date: (C)2004-11-03   (M)2023-12-22


Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and thereby spoof web pages, facilitating phishing attacks, aka the "Plug-in Navigation Address Bar Spoofing Vulnerability."

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9
 
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: NONE
Integrity: PARTIAL
Availability: NONE
  
Reference:
MS04-038
TA04-293A
VU#625616
ie-ms04038-patch(17651)
ie-plugin-address-spoofing(17655)
oval:org.mitre.oval:def:2487
oval:org.mitre.oval:def:2537
oval:org.mitre.oval:def:3949
oval:org.mitre.oval:def:6313
oval:org.mitre.oval:def:7095
oval:org.mitre.oval:def:7194

OVAL    6
oval:org.mitre.oval:def:3949
oval:org.mitre.oval:def:2487
oval:org.mitre.oval:def:2537
oval:org.mitre.oval:def:6313
...

© SecPod Technologies