PT-2004-1638 · Microsoft · Outlook+1

Publicado 2004-06-08 · Atualizado 2021-07-23 · CVE-2004-0526

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Internet Explorer (affected versions not specified) Outlook (affected versions not specified)

Description The issue allows remote attackers to spoof a legitimate URL in the status bar, facilitating a phishing attack. This is achieved by using A HREF tags with modified alt values that point to the legitimate site, combined with an image map whose href points to the malicious site.

Recommendations For Internet Explorer, consider disabling the use of image maps in conjunction with modified alt values until a fix is available. For Outlook, restrict the display of external images to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Identificadores relacionados

CVE-2004-0526

Produtos afetados

Internet Explorer

Outlook

Referências · 7

• 🔥 http://securityfocus.com/bid/10308 · Exploit
• 🔥 https://exploit-db.com/exploits/24102 · Exploit
• http://marc.info/?l=bugtraq&m=108422905510713&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0526 · Nota de Segurança
• http://archives.neohapsis.com/archives/bugtraq/2004-05/0161.html · Nota
• http://kurczaba.com/securityadvisories/0405132poc.htm · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16102 · Nota