Vulnerability in N/a

CVE-2006-3280

Cross-domain vulnerability in Microsoft Internet Explorer 6.0 allows remote attackers to access restricted information from other domains via an object tag with a data parameter that references a link on the attacker's originating site tha…

EPSS: 0.621 (98.4th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

20060627 IE_ONE_MINOR_ONE_MAJOR (mailing-list, x_refsource_FULLDISC)
20060630 RE: [Full-disclosure] Browser bugs hit IE, Firefox today (SANS) (mailing-list, x_refsource_BUGTRAQ)
20825 (x_refsource_SECUNIA, third-party-advisory)
MS06-042 (x_refsource_MS, vendor-advisory)
20060704 Re: Browser bugs hit IE, Firefox today (SANS) (mailing-list, x_refsource_BUGTRAQ)
VU#883108 (x_refsource_CERT-VN, third-party-advisory)
ie-redirection-information-disclosure(27452) (vdb-entry, x_refsource_XF)
1016388 (vdb-entry, x_refsource_SECTRACK)
20060630 Browser bugs hit IE, Firefox today (SANS) (mailing-list, x_refsource_BUGTRAQ)
21396 (x_refsource_SECUNIA, third-party-advisory)