Unscored CVE-2006-4092 EUVD-2006-4084GHSA-p32q-qwj8-v65w

Simpliciti Locked Browser does not properly limit a user's actions to ones within the intended Internet Explorer environment, which allows …

Published Aug 11, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Simpliciti Locked Browser does not properly limit a user's actions to ones within the intended Internet Explorer environment, which allows local users to perform unauthorized actions by visiting a web site that executes a JavaScript window.blur loop to remove focus from the browser window, then pressing CTRL-SHIFT-ESC to invoke the Task Manager.

References

20060822 Simpliciti Locked Browser Jail Breakout Vulnerability mailing-list
21321 third-party-advisory
19304 vdb-entry
20060802 Simpliciti Locked Browser Jail Breakout Vulnerability mailing-list
1365 third-party-advisory
simpliciti-security-bypass(28224) vdb-entry