CVE-2004-1104
- State
- Published
- Severity
- Not scored
- Published
- Dec 1, 2004
- Updated
- Aug 8, 2024
- Reserved
- Nov 30, 2004
Description
Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the legitimate site, followed by an anchor (a) element with an empty "href" attribute, and a FORM whose action points to a malicious URL, and an INPUT submit element that is modified to look like a legitimate URL.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 11273third-party-advisory
- 20041030 Re: New URL spoofing bug in Microsoft Internet Explorermailing-list
- ie-ahref-status-spoofing(17938)vdb-entry
- VU#702086third-party-advisory
- 11565vdb-entry
- 20060218 Re: Internet Explorer Phishing mouseover issuemailing-list
- 20060223 Re: Internet Explorer Phishing mouseover issuemailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.