CVE-2006-5544
⚪ Do wiadomości
Luka w Microsoft Internet Explorer 7 pozwala na oszustwa phishingowe przez fałszowanie paska adresu.
CVSS
6.4
EPSS
54.4%
Exploit
poc
Vendor
microsoft
Opis źródłowy (NVD)
Visual truncation vulnerability in Microsoft Internet Explorer 7 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a malicious URL containing non-breaking spaces (%A0), which causes the address bar to omit some characters from the URL.
exploit
Brak patcha
Źródła i daty
| Źródło | Wartość |
|---|---|
| NVD – CVSS | 6.4 |
| CISA KEV (aktywnie wykorzystywane) | Nie |
| FIRST EPSS (prawdopodobieństwo exploita) | 54.4% |
| Opublikowano (NVD) | 2006-10-26 17:07:00 UTC |
| Ostatnia modyfikacja (NVD) | 2026-04-23 00:35:47 UTC |
Referencje
- http://blogs.technet.com/msrc/archive/2006/10/26/ie-address-bar-issue.aspx (cve@mitre.org)
- http://secunia.com/advisories/22542 (cve@mitre.org) [Exploit]
- http://secunia.com/internet_explorer_7_popup_address_bar_spoofing_test/ (cve@mitre.org) [Exploit, Vendor Advisory]
- http://securitytracker.com/id?1017122 (cve@mitre.org)
- http://www.kb.cert.org/vuls/id/347188 (cve@mitre.org) [US Government Resource]
- http://www.osvdb.org/30022 (cve@mitre.org)
- http://www.securityfocus.com/archive/1/449917/100/0/threaded (cve@mitre.org)
- http://www.securityfocus.com/bid/20728 (cve@mitre.org) [Exploit]
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29827 (cve@mitre.org)