Vulnerabilities > CVE-2007-5158 - Unspecified vulnerability in Microsoft Internet Explorer 6.0

047910
CVSS 4.3 - MEDIUM
Attack vector
NETWORK
Attack complexity
MEDIUM
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
microsoft
exploit available
NVD
Published: 2007-10-01
Updated: 2021-12-13

Summary

The focus handling for the onkeydown event in Microsoft Internet Explorer 6.0 allows remote attackers to change field focus and copy keystrokes via a certain use of a JavaScript htmlFor attribute, as demonstrated by changing focus from a textarea to a file upload field, a related issue to CVE-2007-3511.

Vulnerable Configurations

Part Description Count
Application
Microsoft
1

Exploit-Db

descriptionMicrosoft Internet Explorer 5.0.1 File Upload Vulnerability. CVE-2007-5158. Remote exploit for windows platform
idEDB-ID:30622
last seen2016-02-03
modified2007-09-27
published2007-09-27
reporterRonald van den Heetkamp
sourcehttps://www.exploit-db.com/download/30622/
titleMicrosoft Internet Explorer 5.0.1 File Upload Vulnerability

References