CVE

Id
10809  
CVE No.
CVE-2004-2383  
Status
Candidate  
Description
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and capture keyboard events from other domains via an HTML document with Javascript that is outside a frameset that includes the target domain, then forcing the frameset to maintain focus. NOTE: the discloser claimed that the vendor does not categorize this as a vulnerability, but it can be used in a spoofing scenario; the discloser provides alternate scenarios. Spoofing scenarios are currently included in CVE.  
Phase
Assigned (20050816)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
75382 10809 CVE-2004-2383 IDEFENSE:20040227 Microsoft Internet Explorer Cross Frame Scripting Restriction Bypass  View
75383 10809 CVE-2004-2383 URL:http://www.idefense.com/application/poi/display?id=77&type=vulnerabilities&flashstatus=false  View
75384 10809 CVE-2004-2383 BID:9761  View
75385 10809 CVE-2004-2383 URL:http://www.securityfocus.com/bid/9761  View
75386 10809 CVE-2004-2383 XF:ie-frame-domain-bypass(15337)  View

Related JVN