PT-2005-5344 · Microsoft · Internet Explorer 6+1

Publicado 2005-12-31 · Atualizado 2008-09-05 · CVE-2005-4679

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Internet Explorer 6 for Windows XP Service Pack 2

Description The issue allows remote attackers to spoof the URL in the status bar. This is achieved by using the title in an image in a link to a trusted site within a form to redirect to a malicious site.

Recommendations For Internet Explorer 6 for Windows XP Service Pack 2, consider disabling the display of titles in images within links as a temporary workaround until a patch is available.

Correção

Identificadores relacionados

CVE-2005-4679

Produtos afetados

Internet Explorer 6

Windows Xp

Referências · 2

• http://secunia.com/advisories/17565 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-4679 · Nota de Segurança