NVD

Id
60799  
Name
CVE-2006-2094  
Description
Microsoft Internet Explorer before Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1, when Prompt is configured in Security Settings, uses modal dialogs to verify that a user wishes to run an ActiveX control or perform other risky actions, which allows user-assisted remote attackers to construct a race condition that tricks a user into clicking an object or pressing keys that are actually applied to a "Yes" approval for executing the control.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-04-29  
Modified Date
2011-09-27  
Seq
2006-2094  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
313967 60799 CVE-2006-2094 20040407 Race conditions in security dialogs  View
313968 60799 CVE-2006-2094 20060426 Internet Explorer User Interface Races, Redeux  View
313969 60799 CVE-2006-2094 20060427 PoC for Internet Explorer Modal Dialog Issue  View
313970 60799 CVE-2006-2094 20060427 PoC for Internet Explorer Modal Dialog Issue  View
313971 60799 CVE-2006-2094 1015720  View
313972 60799 CVE-2006-2094 http://student.missouristate.edu/m/matthew007/advisories.asp?adv=2006-02  View
313973 60799 CVE-2006-2094 17713  View
313974 60799 CVE-2006-2094 http://www.squarefree.com/2004/07/01/race-conditions-in-security-dialogs/  View
313975 60799 CVE-2006-2094 ADV-2006-1559  View
313976 60799 CVE-2006-2094 ie-modal-dialog-code-execution(26111)  View

Related JVN