CVE

Id
9583  
CVE No.
CVE-2004-1155  
Status
Candidate  
Description
Internet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by injecting content from one window into another window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability. NOTE: later research shows that Internet Explorer 7 on Windows XP SP2 is also vulnerable.  
Phase
Assigned (20041208)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
65021 9583 CVE-2004-1155 BUGTRAQ:20061025 IE7 status: 8 days after release, 3 unfixed issues  View
65022 9583 CVE-2004-1155 URL:http://www.securityfocus.com/archive/1/archive/1/449917/100/0/threaded  View
65023 9583 CVE-2004-1155 MISC:http://secunia.com/secunia_research/2004-13/advisory/  View
65024 9583 CVE-2004-1155 BID:11855  View
65025 9583 CVE-2004-1155 URL:http://www.securityfocus.com/bid/11855  View
65026 9583 CVE-2004-1155 SECUNIA:13251  View
65027 9583 CVE-2004-1155 URL:http://secunia.com/advisories/13251/  View
65028 9583 CVE-2004-1155 MISC:http://secunia.com/multiple_browsers_window_injection_vulnerability_test/  View
65029 9583 CVE-2004-1155 SECUNIA:22628  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
63174 JVNDB-2004-000516 Mozilla Firefox のクロスドメインセキュリティチェック機能におけるコンテンツ表示を制御される脆弱性 ------------ CVE-2004-1156 9583 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000516.html  View