CVE

Id
11260  
CVE No.
CVE-2005-0054  
Status
Candidate  
Description
Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitrary code via an HTML page containing URLs that contain hostnames that have been double hex encoded, which are decoded twice to generate a malicious hostname, aka the "URL Decoding Zone Spoofing Vulnerability."  
Phase
Assigned (20050111)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
79628 11260 CVE-2005-0054 BUGTRAQ:20050209 Internet Explorer zone spoofing with encoded URLs  View
79629 11260 CVE-2005-0054 URL:http://marc.info/?l=bugtraq&m=110796851002781&w=2  View
79630 11260 CVE-2005-0054 FULLDISC:20050209 Internet Explorer zone spoofing with encoded URLs  View
79631 11260 CVE-2005-0054 MS:MS05-014  View
79632 11260 CVE-2005-0054 URL:http://www.microsoft.com/technet/security/bulletin/ms05-014.mspx  View
79633 11260 CVE-2005-0054 CERT:TA05-039A  View
79634 11260 CVE-2005-0054 URL:http://www.us-cert.gov/cas/techalerts/TA05-039A.html  View
79635 11260 CVE-2005-0054 CERT-VN:VU#580299  View
79636 11260 CVE-2005-0054 URL:http://www.kb.cert.org/vuls/id/580299  View
79637 11260 CVE-2005-0054 OVAL:oval:org.mitre.oval:def:1308  View
79638 11260 CVE-2005-0054 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1308  View
79639 11260 CVE-2005-0054 OVAL:oval:org.mitre.oval:def:1736  View
79640 11260 CVE-2005-0054 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1736  View
79641 11260 CVE-2005-0054 OVAL:oval:org.mitre.oval:def:3060  View
79642 11260 CVE-2005-0054 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3060  View
79643 11260 CVE-2005-0054 OVAL:oval:org.mitre.oval:def:3196  View
79644 11260 CVE-2005-0054 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3196  View
79645 11260 CVE-2005-0054 OVAL:oval:org.mitre.oval:def:3586  View
79646 11260 CVE-2005-0054 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:3586  View
79647 11260 CVE-2005-0054 XF:ie-file-url-encode(19214)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
61900 JVNDB-2005-000102 Microsoft Internet Explorer の CDF ファイルの処理におけるセキュリティ制限を回避される脆弱性 Microsoft Internet Explorer には、チャンネル定義形式 (CDF) ファイル内の URL の妥当性が適切にチェックされないため、クロスドメインセキュリティモデルが回避される脆弱性が存在します。 CVE-2005-0056 11260 5.1 http://jvndb.jvn.jp/ja/contents/2005/JVNDB-2005-000102.html  View