CVE-2006-1192
published 2006-04-11CVE-2006-1192: Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via…
PriorityP416low2.6CVSS 2.0
AVNACHAuNCNIPAN
EXPLOIT
EPSS
31.47%
98.1th percentile
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via unknown methods that allow "window content to persist" after the user has navigated to another site, aka the "Address Bar Spoofing Vulnerability." NOTE: this is a different vulnerability than CVE-2006-1626.
Affected
4 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| microsoft | ie | — | — |
| microsoft | ie | — | — |
| microsoft | internet_explorer | — | — |
| microsoft | internet_explorer | — | — |
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-5jjp-qvmw-c36p: Microsoft Internet Explorer 5
ghsa_unreviewed·2022-05-01·CVSS 4.3
CVE-2006-1192 [MEDIUM] CWE-20 GHSA-5jjp-qvmw-c36p: Microsoft Internet Explorer 5
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via unknown methods that allow "window content to persist" after the user has navigated to another site, aka the "Address Bar Spoofing Vulnerability." NOTE: this is a different vulnerability than CVE-2006-1626.
GHSA
GHSA-wpcm-5rf2-mrhv: Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-openin
ghsa_unreviewed·2022-05-01·CVSS 2.6
CVE-2006-1626 [LOW] CWE-20 GHSA-wpcm-5rf2-mrhv: Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-openin
Internet Explorer 6 for Windows XP SP2 and earlier allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading. NOTE: this is a different vulnerability than CVE-2006-1192.
No detection rules found.
No writeups or analysis indexed.
http://secunia.com/advisories/18957http://securityreason.com/securityalert/670http://securitytracker.com/id?1015899http://www.securityfocus.com/bid/17460http://www.vupen.com/english/advisories/2006/1318https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013https://exchange.xforce.ibmcloud.com/vulnerabilities/25557https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1336https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1498https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1645https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1725https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1740http://secunia.com/advisories/18957http://securityreason.com/securityalert/670http://securitytracker.com/id?1015899http://www.securityfocus.com/bid/17460http://www.vupen.com/english/advisories/2006/1318https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013https://exchange.xforce.ibmcloud.com/vulnerabilities/25557https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1336https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1498https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1645https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1725https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1740
2006-04-11
Published