Improper input validation in Canon Network Camera Server Vb101
CVE-2006-1192
Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via unknown methods that allow "window content to persist" after the user has navigated to another site, aka the "Address Bar Spoofing Vulnerability." NOTE: this is a different vulnerability than CVE-2006-1626.
Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)
Published · last modified .
CVSS v2 metric
CVSS v2 base score 2.6 (Low). Vector: AV:N/AC:H/Au:N/C:N/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.317 (98.2th percentile), scored .
Moderate probability of exploitation in the next 30 days — watch for active exploitation reports. 98th percentile — 98.2% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.315 · newest: 0.317 · change: +0.003
Affected products
- Canon Network Camera Server Vb101
- Microsoft Ie — versions 5.01, 6
- Microsoft Internet Explorer — versions 6
Weakness classification (CWE)
References
- secunia.com/advisories/18957 (Patch, Vendor Advisory, third-party-advisory)
- oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:1498 (signature, vdb-entry)
- securityreason.com/securityalert/670 (third-party-advisory)
- exchange.xforce.ibmcloud.com/vulnerabilities/25557 (vdb-entry)
- www.securityfocus.com/bid/17460 (Patch, vdb-entry)
- oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:1645 (signature, vdb-entry)
- docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013 (vendor-advisory)
- oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:1336 (signature, vdb-entry)
- www.vupen.com/english/advisories/2006/1318 (vdb-entry, Vendor Advisory)
- oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:1740 (signature, vdb-entry)