CVE

Id
24856  
CVE No.
CVE-2007-1499  
Status
Candidate  
Description
Microsoft Internet Explorer 7.0 on Windows XP and Vista allows remote attackers to conduct phishing attacks and possibly execute arbitrary code via a res: URI to navcancl.htm with an arbitrary URL as an argument, which displays the URL in the location bar of the "Navigation Canceled" page and injects the script into the "Refresh the page" link, aka Navigation Cancel Page Spoofing Vulnerability."  
Phase
Assigned (20070317)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
246279 24856 CVE-2007-1499 BUGTRAQ:20070314 Phishing using IE7 local resource vulnerability  View
246280 24856 CVE-2007-1499 URL:http://www.securityfocus.com/archive/1/archive/1/462833/100/0/threaded  View
246281 24856 CVE-2007-1499 BUGTRAQ:20070315 RE: Phishing using IE7 local resource vulnerability  View
246282 24856 CVE-2007-1499 URL:http://www.securityfocus.com/archive/1/archive/1/462945/100/0/threaded  View
246283 24856 CVE-2007-1499 BUGTRAQ:20070315 Re: Phishing using IE7 local resource vulnerability  View
246284 24856 CVE-2007-1499 URL:http://www.securityfocus.com/archive/1/archive/1/462939/100/0/threaded  View
246285 24856 CVE-2007-1499 MISC:http://aviv.raffon.net/2007/03/14/PhishingUsingIE7LocalResourceVulnerability.aspx  View
246286 24856 CVE-2007-1499 MISC:http://news.com.com/2100-1002_3-6167410.html  View
246287 24856 CVE-2007-1499 HP:HPSBST02231  View
246288 24856 CVE-2007-1499 URL:http://www.securityfocus.com/archive/1/archive/1/471947/100/0/threaded  View
246289 24856 CVE-2007-1499 HP:SSRT071438  View
246290 24856 CVE-2007-1499 URL:http://www.securityfocus.com/archive/1/archive/1/471947/100/0/threaded  View
246291 24856 CVE-2007-1499 MS:MS07-033  View
246292 24856 CVE-2007-1499 URL:http://www.microsoft.com/technet/security/bulletin/ms07-033.mspx  View
246293 24856 CVE-2007-1499 CERT:TA07-163A  View
246294 24856 CVE-2007-1499 URL:http://www.us-cert.gov/cas/techalerts/TA07-163A.html  View
246295 24856 CVE-2007-1499 BID:22966  View
246296 24856 CVE-2007-1499 URL:http://www.securityfocus.com/bid/22966  View
246297 24856 CVE-2007-1499 OSVDB:35352  View
246298 24856 CVE-2007-1499 URL:http://osvdb.org/35352  View
246299 24856 CVE-2007-1499 VUPEN:ADV-2007-0946  View
246300 24856 CVE-2007-1499 URL:http://www.vupen.com/english/advisories/2007/0946  View
246301 24856 CVE-2007-1499 VUPEN:ADV-2007-2153  View
246302 24856 CVE-2007-1499 URL:http://www.vupen.com/english/advisories/2007/2153  View
246303 24856 CVE-2007-1499 OVAL:oval:org.mitre.oval:def:1715  View
246304 24856 CVE-2007-1499 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:1715  View
246305 24856 CVE-2007-1499 SECTRACK:1018235  View
246306 24856 CVE-2007-1499 URL:http://securitytracker.com/id?1018235  View
246307 24856 CVE-2007-1499 SECUNIA:24535  View
246308 24856 CVE-2007-1499 URL:http://secunia.com/advisories/24535  View
246309 24856 CVE-2007-1499 SECUNIA:25627  View
246310 24856 CVE-2007-1499 URL:http://secunia.com/advisories/25627  View
246311 24856 CVE-2007-1499 SREASON:2448  View
246312 24856 CVE-2007-1499 URL:http://securityreason.com/securityalert/2448  View
246313 24856 CVE-2007-1499 XF:ie-navcancl-xss(33026)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
53019 JVNDB-2007-001711 Avant Browser におけるスタックベースのバッファオーバーフローの脆弱性 Avant Browser には、スタックベースのバッファオーバーフローの脆弱性が存在します。 CVE-2007-1501 24856 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-001711.html  View