CVEvulnerability
CVE-2004-2219
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:N/I:P/A:N
Description
Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javascript that uses an invalid URI, modifies the Location field, then uses history.back to navigate to the previous domain, aka NullyFake.
Affected configurations
• microsoft ie 6.0
• microsoft internet explorer 5.01
• microsoft internet explorer 5.5
• microsoft internet explorer 6.0
Related
Referenced by CWE · observed example (1)
- CWE-451 User Interface (UI) Misrepresentation of Critical Information weakness
References
- http://archives.neohapsis.com/archives/bugtraq/2004-08/0215.html Exploit
- http://secunia.com/advisories/12304 Exploit, Vendor Advisory
- http://securitytracker.com/id?1010957 Exploit
- http://umbrella.name/originalvuln/msie/NullyFake/nullyfake-content.txt umbrella.name
- http://www.osvdb.org/8978 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17007 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2004-08/0215.html Exploit
- http://secunia.com/advisories/12304 Exploit, Vendor Advisory
- http://securitytracker.com/id?1010957 Exploit
- http://umbrella.name/originalvuln/msie/NullyFake/nullyfake-content.txt umbrella.name
- http://www.osvdb.org/8978 www.osvdb.org
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17007 exchange.xforce.ibmcloud.com