medium5.0Public exploit code
CVE-2004-0526
Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Microsoft Internet Explorer 4/5/6 - Embedded Image URI Obfuscation2004-05-10 · remote · windows · Verified
Impact
Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Microsoft | Ie | Version 6.0 |
| Microsoft | Internet Explorer | Versions 5.0, 5.0.1, 5.5, 6.0 |
| Microsoft | Outlook | Versions 97, 98, 2000, 2002, 2003 |
| Microsoft | Outlook Express | Versions 4.0, 4.01, 4.27.3110, 4.72.2106, 4.72.3120.0, 4.72.3612 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2004-05/0161.html
- http://marc.info/?l=bugtraq&m=108422905510713&w=2
- http://www.kurczaba.com/securityadvisories/0405132poc.htm
- http://www.securityfocus.com/bid/10308
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16102
- http://archives.neohapsis.com/archives/bugtraq/2004-05/0161.html
- http://marc.info/?l=bugtraq&m=108422905510713&w=2
- http://www.kurczaba.com/securityadvisories/0405132poc.htm
- http://www.securityfocus.com/bid/10308
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16102