PT-2006-2208 · Microsoft · Internet Explorer

Hai Nam Luke · Published 2006-04-11 · Updated 2021-07-23 · CVE-2006-1192

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Microsoft Internet Explorer versions 5.01 through 6

Description A spoofing issue exists, allowing remote attackers to conduct phishing attacks by displaying spoofed content in a browser window. The address bar and other parts of the trust UI can be spoofed, making it appear as though the user has navigated to another site when, in fact, the content of the window still contains the attacker's Web page. This occurs via unknown methods that allow window content to persist after the user has navigated to another site.

Recommendations For Microsoft Internet Explorer versions 5.01 through 6, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2006-1192

Affected Products

Internet Explorer

References · 23

• 🔥 https://exploit-db.com/exploits/1838 · Exploit
• http://vupen.com/english/advisories/2006/1318 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1192 · Security Note
• http://securityfocus.com/bid/17460 · Patch
• http://secunia.com/advisories/18957 · Vendor Advisory
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-1192 · Security Note
• http://securitytracker.com/id?1015899 · Patch
• http://securityreason.com/securityalert/670 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1498 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1336 · Note
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1336 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1498 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1725 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/25557 · Note