PT-2004-1907 · Microsoft · Internet Explorer
Mitja Kolsek
·
Published
2004-10-16
·
Updated
2021-07-23
·
CVE-2004-0845
CVSS v2.0
6.4
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:N |
Name of the Vulnerable Software and Affected Versions:
Internet Explorer versions 5.01, 5.5, and 6
Description:
The issue allows remote attackers to obtain information or spoof content via a web site with the same host name as the target web site, whose content is cached and reused when the user visits the target web site. This occurs because the browser does not properly cache SSL content.
Recommendations:
For Internet Explorer versions 5.01, 5.5, and 6, consider disabling SSL caching as a temporary workaround until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Internet Explorer