PT-2004-1907 · Microsoft · Internet Explorer

Mitja Kolsek

·

Publicado

2004-10-16

·

Atualizado

2021-07-23

·

CVE-2004-0845

CVSS v2.0

6.4

Média

VetorAV:N/AC:L/Au:N/C:P/I:P/A:N
Name of the Vulnerable Software and Affected Versions: Internet Explorer versions 5.01, 5.5, and 6
Description: The issue allows remote attackers to obtain information or spoof content via a web site with the same host name as the target web site, whose content is cached and reused when the user visits the target web site. This occurs because the browser does not properly cache SSL content.
Recommendations: For Internet Explorer versions 5.01, 5.5, and 6, consider disabling SSL caching as a temporary workaround until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾

Identificadores relacionados

CVE-2004-0845

Produtos afetados

Internet Explorer