CVE-2006-1192 Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via unknown methods that allow "window conten...
LowCVSS 2.6
EPSS 31.7%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via unknown methods that allow "window content to persist" after the user has navigated to another site, aka the "Address Bar Spoofing Vulnerability." NOTE: this is a different vulnerability than CVE-2006-1626.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft ie | = 5.01-windows_2000_sp4 | No fix listed |
| Microsoft ie | = 6 | No fix listed |
| Microsoft ie | = 6-sp1 | No fix listed |
| Microsoft ie | = 6-windows_2000_sp4 | No fix listed |
| Microsoft ie | = 6-windows_server_2003_sp1 | No fix listed |
| Microsoft ie | = 6-windows_server_2003_sp1_itanium_systems | No fix listed |
| Microsoft ie | = 6-windows_xp_sp2 | No fix listed |
| Microsoft internet explorer | = 6-sp1 | No fix listed |
| canon network camera server vb101 | All versions | No fix listed |
References
- 18957 patch third-party-advisory vendor-advisory
- 670 third-party-advisory
- 1015899 patch vdb-entry
- 17460 patch vdb-entry
- ADV-2006-1318 vdb-entry vendor-advisory
- MS06-013 vendor-advisory
- ie-browser-window-spoofing(25557) vdb-entry
- oval:org.mitre.oval:def:1336 signature vdb-entry
- oval:org.mitre.oval:def:1498 signature vdb-entry
- oval:org.mitre.oval:def:1645 signature vdb-entry
- oval:org.mitre.oval:def:1725 signature vdb-entry
- oval:org.mitre.oval:def:1740 signature vdb-entry