Internet Explorer 5.01 through 6 allows remote attackers to spoof arbitrary web sites by injecting content from one window into another window whose name is known but resides in a different domain, as demonstrated using a pop-up window on a trusted web site, aka the "window injection" vulnerability. NOTE: later research shows that Internet Explorer 7 on Windows XP SP2 is also vulnerable.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2004-12-10T05:00:00
Updated: 2018-10-19T14:57:01
Reserved: 2004-12-08T00:00:00
Link: CVE-2004-1155
JSON object: View
NVD Information
Status : Modified
Published: 2004-12-31T05:00:00.000
Modified: 2021-07-23T12:55:03.667
Link: CVE-2004-1155
JSON object: View
Redhat Information
No data.
CWE