CVE-2006-1192
35Vexday Risk Score
Sin señal de explotación. Ella tiene prueba de concepto pública.
ssvc Attendepss 31%
de la publicación al arma46 días
Publicada en NVD11 abr
1ª PoC+46d
probabilidad de explotación
31%top 2% de las CVE
explotación observada
noninguna fuente lo reporta
1 exploit(s) público(s)
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via unknown methods that allow "window content to persist" after the user has navigated to another site, aka the "Address Bar Spoofing Vulnerability." NOTE: this is a different vulnerability than CVE-2006-1626.
Productos afectados
n/a · n/aPoCs públicas encontradas — 1✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/1838⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
Referencias
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013http://secunia.com/advisories/18957http://securityreason.com/securityalert/670http://securitytracker.com/id?1015899https://exchange.xforce.ibmcloud.com/vulnerabilities/25557https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1336https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1498https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1645https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1725https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1740http://www.securityfocus.com/bid/17460http://www.vupen.com/english/advisories/2006/1318