CVE

Id
9532  
CVE No.
CVE-2004-1104  
Status
Candidate  
Description
Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the legitimate site, followed by an anchor (a) element with an empty "href" attribute, and a FORM whose action points to a malicious URL, and an INPUT submit element that is modified to look like a legitimate URL.  
Phase
Assigned (20041130)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
64513 9532 CVE-2004-1104 BUGTRAQ:20041030 Re: New URL spoofing bug in Microsoft Internet Explorer  View
64514 9532 CVE-2004-1104 URL:http://www.securityfocus.com/archive/1/379903  View
64515 9532 CVE-2004-1104 BUGTRAQ:20060218 Re: Internet Explorer Phishing mouseover issue  View
64516 9532 CVE-2004-1104 URL:http://www.securityfocus.com/archive/1/archive/1/425386/100/0/threaded  View
64517 9532 CVE-2004-1104 BUGTRAQ:20060223 Re: Internet Explorer Phishing mouseover issue  View
64518 9532 CVE-2004-1104 URL:http://www.securityfocus.com/archive/1/archive/1/425883/100/0/threaded  View
64519 9532 CVE-2004-1104 CERT-VN:VU#702086  View
64520 9532 CVE-2004-1104 URL:http://www.kb.cert.org/vuls/id/702086  View
64521 9532 CVE-2004-1104 BID:11565  View
64522 9532 CVE-2004-1104 URL:http://www.securityfocus.com/bid/11565  View
64523 9532 CVE-2004-1104 SECUNIA:11273  View
64524 9532 CVE-2004-1104 URL:http://secunia.com/advisories/11273  View
64525 9532 CVE-2004-1104 XF:ie-ahref-status-spoofing(17938)  View

Related JVN