PT-2005-5344 · Microsoft · Internet Explorer 6+1

Published 2005-12-31 · Updated 2008-09-05 · CVE-2005-4679

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Internet Explorer 6 for Windows XP Service Pack 2

Description The issue allows remote attackers to spoof the URL in the status bar. This is achieved by using the title in an image in a link to a trusted site within a form to redirect to a malicious site.

Recommendations For Internet Explorer 6 for Windows XP Service Pack 2, consider disabling the display of titles in images within links as a temporary workaround until a patch is available.

Fix

Related Identifiers

CVE-2005-4679

Affected Products

Internet Explorer 6

Windows Xp

References · 2

• http://secunia.com/advisories/17565 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-4679 · Security Note