PT-2006-2624 · Adobe+1 · Shockwave Flash+3

Hoshikuzu Star_Dust + 1 · Published 2006-04-05 · Updated 2021-07-23 · CVE-2006-1626

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions: Internet Explorer 6 for Windows XP SP2 and earlier

Description: A spoofing issue exists that could allow an attacker to display spoofed content in a browser window. The address bar and other parts of the trust UI can be displayed from trusted Web sites, but the content of the window contains the attacker's Web page. This can be achieved by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading.

Recommendations: For Internet Explorer 6 for Windows XP SP2 and earlier, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2006-1626

Affected Products

Internet Explorer

Internet Explorer 6

Shockwave Flash

Windows Xp

References · 33

• 🔥 http://secunia.com/advisories/19521 · Exploit
• 🔥 http://securityfocus.com/bid/17404 · Exploit
• 🔥 https://exploit-db.com/exploits/27577 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1626 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2006-1626 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021 · Vendor Advisory
• http://secunia.com/Internet_Explorer_Address_Bar_Spoofing_Vulnerability_Test · Vendor Advisory
• http://vupen.com/english/advisories/2006/2319 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1806 · Note
• http://frsirt.com/english/advisories/2006/2319 · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1881 · Note
• http://securityfocus.com/archive/1/archive/1/440851/100/100/threaded · Note
• http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1600 · Note
• http://frsirt.com/english/advisories/2006/1218 · Note
• http://vupen.com/english/advisories/2006/1218 · Note