Vulnerabilities > CVE-2006-5544 - Unspecified vulnerability in Microsoft IE 7.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
NONE Summary
Visual truncation vulnerability in Microsoft Internet Explorer 7 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a malicious URL containing non-breaking spaces (%A0), which causes the address bar to omit some characters from the URL.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 |
References
- http://blogs.technet.com/msrc/archive/2006/10/26/ie-address-bar-issue.aspx
- http://secunia.com/advisories/22542
- http://secunia.com/internet_explorer_7_popup_address_bar_spoofing_test/
- http://securitytracker.com/id?1017122
- http://www.kb.cert.org/vuls/id/347188
- http://www.osvdb.org/30022
- http://www.securityfocus.com/archive/1/449917/100/0/threaded
- http://www.securityfocus.com/bid/20728
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29827