Description
Internet Explorer 4.x and 5.x does not properly verify all contents of an SSL certificate if a connection is made to the server via an image or a frame, aka one of two different "SSL Certificate Validation" vulnerabilities.
References
- http://www.acrossecurity.com/aspr/ASPR-1999-12-15-1-PUB.txt
- ie-invalid-frame-image-certificate(4624) vdb-entry
- CA-2000-10 third-party-advisory
- MS00-039 vendor-advisory
- 1309 vdb-entry