NVD

Id
55318  
Name
CVE-2007-3164  
Description
Microsoft Internet Explorer 7, when prompting for HTTP Basic Authentication for an IDN web site, uses ACE labels for the domain name in the status bar, but uses internationalized labels for this name in the authentication dialog, which might allow remote attackers to perform phishing attacks if the user misinterprets confusable characters in the internationalized labels, as demonstrated by displaying xn--theshmogroup-bgk.com only in the status bar.  
Reject
 
CVSS Version
2  
CVSS Score
5.8  
Severity
Medium  
CVSS Base Score
5.8  
CVSS Impact Subscore
4.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:N)  
Pub Date
2017-01-07  
Published
2007-06-11  
Modified Date
2008-11-15  
Seq
2007-3164  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
281159 55318 CVE-2007-3164 http://ha.ckers.org/blog/20070608/cross-domain-basic-auth-phishing-tactics/  View
281160 55318 CVE-2007-3164 http://www.bitsploit.de/archives/428-Cross-Domain-Basic-Auth-Phishing-Tactics.html  View
281161 55318 CVE-2007-3164 24483  View
281162 55318 CVE-2007-3164 ie-idn-authentication-spoofing(34867)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55295 JVNDB-2007-003987 Microsoft Internet Explorer 7 におけるフィッシング攻撃を実行される脆弱性 Microsoft Internet Explorer 7 には、IDN Web サイトの HTTP Basic Authentication に対してプロンプトを表示している際、ステータスバーのドメイン名の ACE ラベルを使用するが認証ダイアログのドメイン名の国際化ラベルを使用するため、国際化ラベルで紛らわしい文字をユーザーが誤って解釈した場合フィッシング攻撃を実行される脆弱性が存在します。 CVE-2007-3164 26519 CVE-2007-3164 55318 5.8 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-003987.html 2007-06-11 2012-09-25 View