CVE

Id
1639  
CVE No.
CVE-2000-0061  
Status
Candidate  
Description
Internet Explorer 5 does not modify the security zone for a document that is being loaded into a window until after the document has been loaded, which could allow remote attackers to execute Javascript in a different security context while the document is loading.  
Phase
Proposed (20000125)  
Votes
MODIFY(2) Frech, LeBlanc | NOOP(1) Baker | REJECT(1) Christey  
Comments
Frech> XF:ie-cross-frame-docs(3901) | LeBlanc> - I"d like to see a KB or bulletin referenced | Christey> This is a duplicate of CVE-2000-0156. The FAQ at | http://www.microsoft.com/technet/security/bulletin/fq00-009.asp. | says "the vulnerability requires Active Scripting" and | "it is possible, under very specific conditions, to violate IE"s | cross-domain security model." Also says "the redirect is made, via | the <IMG SRC> HTML tag" | | Need to copy these references over to CVE-2000-0156.  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
5116 1639 CVE-2000-0061 BUGTRAQ:20000107 IE 5 security vulnerablity - circumventing Cross-frame security policy and accessing the DOM of "old" documents.  View
5117 1639 CVE-2000-0061 BID:923  View

Related JVN