Oval Definition:oval:org.mitre.oval:def:5520
Revision Date:2014-02-24Version:46
Title:IE v5.5, SP2 SSL Cached Content Vulnerability
Description:Internet Explorer 5.01, 5.5, and 6 does not properly cache SSL content, which allows remote attackers to obtain information or spoof content via a web site with the same host name as the target web site, whose content is cached and reused when the user visits the target web site.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2004-0845
Platform(s):Microsoft Windows ME
Product(s):Microsoft Internet Explorer
Definition Synopsis
  • Software section
  • Internet Explorer 5.5 Service Pack 2 is installed
  • AND the version of mshtml.dll is less than 5.50.4945.2800
  • AND NOT the patch kb834707 is installed (Installed Components key)
  • AND Configuration section
  • Users not saving encrypted pages to disk (DisableCachingOfSSLPages)
  • BACK