NVD

Id
72760  
Name
CVE-2004-2383  
Description
Microsoft Internet Explorer 5.0 through 6.0 allows remote attackers to bypass cross-frame scripting restrictions and capture keyboard events from other domains via an HTML document with Javascript that is outside a frameset that includes the target domain, then forcing the frameset to maintain focus. NOTE: the discloser claimed that the vendor does not categorize this as a vulnerability, but it can be used in a spoofing scenario; the discloser provides alternate scenarios. Spoofing scenarios are currently included in CVE.  
Reject
 
CVSS Version
2  
CVSS Score
5.1  
Severity
Medium  
CVSS Base Score
5.1  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-12-31  
Modified Date
2017-07-10  
Seq
2004-2383  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
374968 72760 CVE-2004-2383 20040227 Microsoft Internet Explorer Cross Frame Scripting Restriction Bypass  View
374969 72760 CVE-2004-2383 9761  View
374970 72760 CVE-2004-2383 ie-frame-domain-bypass(15337)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
62721 JVNDB-2004-000062 Microsoft Internet Explorer のクロスフレームスクリプティングにおけるセキュリティ制限回避の脆弱性 Microsoft Internet Explorer には、フレームをまたぐアクセスに対する制限が適切に行われていないため、セキュリティ制限を回避される脆弱性が存在します。 CVE-2004-2383 10808 CVE-2004-2383 72760 5.1 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000062.html 2004-02-27 2007-04-01 View