Vulnerabilities > CVE-2004-0526 - Unspecified vulnerability in Microsoft products

CVSS 5.0 - MEDIUM

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

PARTIAL

Availability impact

NONE

network

low complexity

microsoft

exploit available

NVD

Published: 2004-08-06

Updated: 2021-07-23

Summary

Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.

Vulnerable Configurations

Part	Description	Count
Application	Microsoft Microsoft Internet Explorer 5.0 Microsoft Internet Explorer 5.0.1 Microsoft Internet Explorer 5.5 Microsoft Internet Explorer 6.0 Microsoft IE 6.0 Microsoft Outlook 2000 Microsoft Outlook 2002 Microsoft Outlook 2003 Microsoft Outlook 98 Microsoft Outlook 97 Microsoft Outlook Express 4.72.3612 Microsoft Outlook Express 5.0 Microsoft Outlook Express 5.0.1 Microsoft Outlook Express 4.72.3120.0 Microsoft Outlook Express 4.27.3110 Microsoft Outlook Express 4.72.2106 Microsoft Outlook Express 4.0 Microsoft Outlook Express 6.0 Microsoft Outlook Express 5.5 Microsoft Outlook Express 4.01	32

Exploit-Db

description	Microsoft Internet Explorer 4/5/6 Embedded Image URI Obfuscation Weakness. CVE-2004-0526. Remote exploit for windows platform
id	EDB-ID:24102
last seen	2016-02-02
modified	2004-05-10
published	2004-05-10
reporter	http-equiv
source	https://www.exploit-db.com/download/24102/
title	Microsoft Internet Explorer 4/5/6 Embedded Image URI Obfuscation Weakness

Summary

Vulnerable Configurations

Exploit-Db

References