CVE-2007-3092 Microsoft Internet Explorer 6 allows remote attackers to spoof the URL bar, and page properties including SSL certificates, by interrupting page loading through certain use of location DOM objects and...
HighCVSS 9.3
EPSS 20.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Microsoft Internet Explorer 6 allows remote attackers to spoof the URL bar, and page properties including SSL certificates, by interrupting page loading through certain use of location DOM objects and setTimeout calls. NOTE: this issue can be leveraged for phishing and other attacks.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Microsoft internet explorer | = 6.0 | No fix listed |
| Microsoft internet explorer | = 6.0-sp1 | No fix listed |
| Microsoft internet explorer | = 6.0-sp2 | No fix listed |
References
- 20070604 Assorted browser vulnerabilities broken-link mailing-list
- lcamtuf.coredump.cx broken-link
- 45437 broken-link vdb-entry
- 25564 not-applicable third-party-advisory
- 2781 exploit third-party-advisory
- 1018193 third-party-advisory vdb-entry
- 20070604 Assorted browser vulnerabilities mailing-list third-party-advisory vdb-entry
- 24298 third-party-advisory vdb-entry
- ie-location-url-spoofing(34705) vdb-entry