NVD

Id
63193  
Name
CVE-2006-4560  
Description
Internet Explorer 6 on Windows XP SP2 allows remote attackers to execute arbitrary JavaScript in the context of the browser"s session with an arbitrary intranet web server, by hosting script on an Internet web server that can be made inaccessible by the attacker and that has a domain name under the attacker"s control, which can force the browser to drop DNS pinning and perform a new DNS query for the domain name after the script is already running.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-09-05  
Modified Date
2008-09-05  
Seq
2006-4560  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
329116 63193 CVE-2006-4560 http://polyboy.net/xss/dnsslurp.html  View
329117 63193 CVE-2006-4560 http://shampoo.antville.org/stories/1451301/  View
329118 63193 CVE-2006-4560 20060814 (somewhat) breaking the same-origin policy by undermining dns-pinning  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
59786 JVNDB-2006-002052 Windows XP SP2 上の Internet Explorer 6 における任意の JavaScript を実行される脆弱性 Windows 上で稼動する Internet Explorer 6 には、任意のイントラネット Web サーバのブラウザセッションのコンテキストで任意の JavaScript を実行される脆弱性が存在します。 CVE-2006-4560 20662 CVE-2006-4560 63193 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002052.html 2006-09-05 2012-09-25 View