Revision Date: | 2011-05-16 | Version: | 45 |
Title: | Address Bar Spoofing Vulnerability (WinS03) |
Description: | Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing attacks by using a modal browser window in a way that preserves the original address bar and trusted UI of a trusted site, even after the browser has been navigated to a malicious site, aka the "Address Bar Spoofing Vulnerability." |
Family: | windows | Class: | vulnerability |
Status: | ACCEPTED | Reference(s): | CVE-2006-2384
|
Platform(s): | Microsoft Windows Server 2003
| Product(s): | Microsoft Internet Explorer
|
Definition Synopsis |
Windows Server 2003 is installed AND NOT Win2K/XP/2003 is patched
AND the version of mshtml.dll is less than 6.0.3790.536
|