NVD

Id
60333  
Name
CVE-2006-1626  
Description
Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading. NOTE: this is a different vulnerability than CVE-2006-1192.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2016-12-20  
Published
2006-04-05  
Modified Date
2011-10-11  
Seq
2006-1626  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
310740 60333 CVE-2006-1626 oval:org.mitre.oval:def:1600  View
310741 60333 CVE-2006-1626 oval:org.mitre.oval:def:1604  View
310742 60333 CVE-2006-1626 oval:org.mitre.oval:def:1806  View
310743 60333 CVE-2006-1626 oval:org.mitre.oval:def:1842  View
310744 60333 CVE-2006-1626 oval:org.mitre.oval:def:1881  View
310745 60333 CVE-2006-1626 oval:org.mitre.oval:def:1918  View
310746 60333 CVE-2006-1626 1016291  View
310747 60333 CVE-2006-1626 MS06-021  View
310748 60333 CVE-2006-1626 20060403 Another Internet Explorer Address Bar Spoofing Vulnerability  View
310749 60333 CVE-2006-1626 20060404 Another way to spoof Internet Explorer Address Bar  View
310750 60333 CVE-2006-1626 20060721 about bid 17404  View
310751 60333 CVE-2006-1626 17404  View
310752 60333 CVE-2006-1626 ADV-2006-1218  View
310753 60333 CVE-2006-1626 ADV-2006-2319  View
310754 60333 CVE-2006-1626 ie-swf-addressbar-spoofing(25634)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
57959 JVNDB-2006-000155 Microsoft Internet Explorer の swf ファイルの処理によりアドレスバーを偽装される脆弱性 Microsoft Internet Explorer には、Flash (.swf) ファイルをロードする際に競合状態が発生する不備が存在するため、ファイルのロード時に特定のタイミングで window.location オブジェクトが変更されると、アドレスバーの表示を任意の URL に偽装される脆弱性が存在します。 CVE-2006-1626 17728 CVE-2006-1626 60333 5.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-000155.html 2006-04-04 2007-04-01 View