2.6

CVE-2005-2274

Exploit
Microsoft Internet Explorer 6.0 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Microsoft ≫ Internet Explorer Version6.0
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 9.58% 0.949
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 2.6 4.9 2.9
AV:N/AC:H/Au:N/C:N/I:P/A:N
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/
Exploit
http://secunia.com/advisories/15491
Vendor Advisory
Exploit
http://secunia.com/advisories/15492
Vendor Advisory
http://secunia.com/secunia_research/2005-9/advisory/
Vendor Advisory
http://www.microsoft.com/technet/security/advisory/902333.mspx
Vendor Advisory