CVE-2006-2384Sensitive Information Exposure in Microsoft Internet Explorer

Severity
4.3MEDIUMNVD
EPSS
24.8%
top 3.83%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 13
Latest updateMay 1

Description

Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing attacks by using a modal browser window in a way that preserves the original address bar and trusted UI of a trusted site, even after the browser has been navigated to a malicious site, aka the "Address Bar Spoofing Vulnerability."

CVSS vector

AV:N/AC:M/C:N/I:P/A:NExploitability: 8.6 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

1
GHSA
GHSA-9cgg-c8pg-gh35: Microsoft Internet Explorer 52022-05-01
CVE-2006-2384 — Sensitive Information Exposure | cvebase