NVD

Id
78844  
Name
CVE-2001-1410  
Description
Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attackers to simulate a victim's display and conduct unauthorized activities or steal sensitive data via social engineering.  
Reject
 
CVSS Version
2  
CVSS Score
5  
Severity
Medium  
CVSS Base Score
5  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:N/A:N)  
Pub Date
2017-07-18  
Published
2003-08-18  
Modified Date
2017-07-10  
Seq
2001-1410  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
393838 78844 CVE-2001-1410 20030713 IE chromeless window vulnerabilities  View
393839 78844 CVE-2001-1410 20030715 Internet Explorer Full-Screen mode threats  View
393840 78844 CVE-2001-1410 http://www.doxdesk.com/personal/posts/bugtraq/20030713-ie/  View
393841 78844 CVE-2001-1410 http://www.guninski.com/popspoof.html  View
393842 78844 CVE-2001-1410 VU#490708  View
393843 78844 CVE-2001-1410 20011021 Javascript in IE may spoof the whole screen  View
393844 78844 CVE-2001-1410 3469  View
393845 78844 CVE-2001-1410 http://www.systemintegra.com/ie-fullscreen/  View
393846 78844 CVE-2001-1410 ie-javascript-spoof-dialog(7313)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64186 JVNDB-2001-000160 Microsoft Internet Explorer における Desktop/Download ダイアログが偽装される脆弱性 Microsoft Internet Explorer において、JavaScript の window.createPopup() や popup.show() 関数を不正に利用された場合に、ポップアップウィンドウでデスクトップやダウンロードダイアログの表示を偽装される脆弱性が存在します。 CVE-2001-1410 4213 CVE-2001-1410 78844 5 http://jvndb.jvn.jp/ja/contents/2001/JVNDB-2001-000160.html 2001-10-21 2007-04-01 View