NVD

Id
37650  
Name
CVE-2013-1451  
Description
Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not ensure that the SSL lock icon is consistent with the Address bar, which makes it easier for remote attackers to spoof web sites via a crafted HTML document that triggers many HTTPS requests to an arbitrary host, followed by an HTTPS request to a trusted host and then an HTTP request to an untrusted host, a related issue to CVE-2013-1450.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:N/I:P/A:P)  
Pub Date
2017-01-18  
Published
2013-01-29  
Modified Date
2013-01-30  
Seq
2013-1451  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
191513 37650 CVE-2013-1451 http://pastebin.com/raw.php?i=rz9BcBey  View
191514 37650 CVE-2013-1451 http://www.youtube.com/ChristianHaiderPoC  View
191515 37650 CVE-2013-1451 http://www.youtube.com/watch?v=TPqagWAvo8U  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
19744 JVNDB-2013-001319 Microsoft Internet Explorer 8 および 9 における Web サイトを偽装される脆弱性 Microsoft Internet Explorer 8 および 9 は、プロキシ設定において HTTP および HTTPS に同じプロキシアドレスとポートの値を持つ場合、SSL 鍵アイコンがアドレスバーと一致していることを確認しないため、Web サイトを偽装される脆弱性が存在します。 CVE-2013-1451 61393 CVE-2013-1451 37650 4 http://jvndb.jvn.jp/ja/contents/2013/JVNDB-2013-001319.html 2013-01-29 2013-02-05 View