Description
Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing attacks by using a modal browser window in a way that preserves the original address bar and trusted UI of a trusted site, even after the browser has been navigated to a malicious site, aka the "Address Bar Spoofing Vulnerability."
References
- 20595 third-party-advisory
- ADV-2006-2319 vdb-entry
- 1016291 vdb-entry
- 18321 vdb-entry
- oval:org.mitre.oval:def:1567 vdb-entry signature
- 26445 vdb-entry
- oval:org.mitre.oval:def:1788 vdb-entry signature
- ie-address-bar-spoof(26777) vdb-entry
- oval:org.mitre.oval:def:1646 vdb-entry signature
- oval:org.mitre.oval:def:1775 vdb-entry signature
- MS06-021 vendor-advisory
- oval:org.mitre.oval:def:1478 vdb-entry signature
- oval:org.mitre.oval:def:1686 vdb-entry signature