CVE-2007-3092

Опубликовано: 06 июн. 2007

Источник: nvd

CVSS2: 9.3

EPSS Низкий

Описание

Microsoft Internet Explorer 6 allows remote attackers to spoof the URL bar, and page properties including SSL certificates, by interrupting page loading through certain use of location DOM objects and setTimeout calls. NOTE: this issue can be leveraged for phishing and other attacks.

Ссылки

http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html
Broken Link
http://lcamtuf.coredump.cx/ietrap2/
Broken Link
http://osvdb.org/45437
Broken Link
http://secunia.com/advisories/25564
Not Applicable
http://securityreason.com/securityalert/2781
Exploit
Third Party Advisory
http://securitytracker.com/id?1018193
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/470446/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/24298
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/34705
VDB Entry
http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html
Broken Link
http://lcamtuf.coredump.cx/ietrap2/
Broken Link
http://osvdb.org/45437
Broken Link
http://secunia.com/advisories/25564
Not Applicable
http://securityreason.com/securityalert/2781
Exploit
Third Party Advisory
http://securitytracker.com/id?1018193
Third Party Advisory
VDB Entry
http://www.securityfocus.com/archive/1/470446/100/0/threaded
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/24298
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/34705
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:6.0:sp1:*:*:*:*:*:*

cpe:2.3:a:microsoft:internet_explorer:6.0:sp2:*:*:*:*:*:*

EPSS

Процентиль: 90%

0.05815

Низкий

9.3 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-8fc5-f67m-p222

github

почти 4 года назад