Vulnerability in Microsoft Ie
CVE-2004-2219
Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javascript that uses an invalid URI, modifies the Location field, then uses history.back to navigate to the previous domain, aka NullyFake.
EPSS: 0.081 (94.2th percentile) — read the EPSS interpretation.
Affected products
- Microsoft Ie — versions 6.0
- Microsoft Internet_explorer — versions 5.01, 5.5, 6.0
- N/a — versions n/a
Public proof-of-concept exploits
References
- cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ)
- cve@mitre.org (Exploit, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (x_refsource_OSVDB, vdb-entry)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_SECTRACK)
Frequently asked questions
- What is CVE-2004-2219?
- CVE-2004-2219 is a vulnerability in Microsoft Ie. Published 2004-12-31.
- Is CVE-2004-2219 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.