Vulnerabilities > CVE-2006-4092 - Unspecified vulnerability in Simpliciti Locked Browser

047910
CVSS 3.6 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
PARTIAL
Availability impact
NONE
local
low complexity
simpliciti
NVD
Published: 2006-08-11
Updated: 2018-10-17

Summary

Simpliciti Locked Browser does not properly limit a user's actions to ones within the intended Internet Explorer environment, which allows local users to perform unauthorized actions by visiting a web site that executes a JavaScript window.blur loop to remove focus from the browser window, then pressing CTRL-SHIFT-ESC to invoke the Task Manager.

Vulnerable Configurations

Part Description Count
Application
Simpliciti
1

References