Vulnerability in Alexander Clauss Icab
CVE-2005-2271
iCab 2.9.8 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."
EPSS: 0.014 (70.3th percentile) — read the EPSS interpretation.
Affected products
- Alexander_clauss Icab — versions 2.9.8
- N/a — versions n/a
References
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (Exploit, Patch, x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)