JVNDB-2011-000061

Internet Explorer window display vulnerability

Internet Explorer contains a vulnerability where the window display may be forged.

Internet Explorer contains an issue with rendering window displays, which may lead to a window display being forged.

hoshikuzu|star_dust reported this vulnerability to IPA.
JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.

Base Metrics: 4.3 (Medium) [IPA Score]

• Access Vector: Network
• Access Complexity: Medium
• Authentication: None
• Confidentiality Impact: None
• Integrity Impact: Partial
• Availability Impact: None

Microsoft Corporation

• Microsoft Internet Explorer 6 and earlier

This vulnerability could be leveraged to forge the contents of the address bar for phishing attacks.

[Upgrade the Software]
Upgrade to the latest version according to the information provided by the developer.

Microsoft Corporation

• Microsoft Security Advisory : 902333

1. No Mapping(CWE-noinfo) [IPA Evaluation]

1. JVN : JVN#96E584EB

[2011/08/12]
  Web page published