Description
Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and thereby spoof web pages, facilitating phishing attacks, aka the "Plug-in Navigation Address Bar Spoofing Vulnerability."
References
- VU#625616 third-party-advisory
- MS04-038 vendor-advisory
- oval:org.mitre.oval:def:7095 vdb-entry signature
- oval:org.mitre.oval:def:7194 vdb-entry signature
- oval:org.mitre.oval:def:2487 vdb-entry signature
- TA04-293A third-party-advisory
- ie-ms04038-patch(17651) vdb-entry
- oval:org.mitre.oval:def:2537 vdb-entry signature
- ie-plugin-address-spoofing(17655) vdb-entry
- oval:org.mitre.oval:def:3949 vdb-entry signature
- oval:org.mitre.oval:def:6313 vdb-entry signature