CVE-2004-2219

Published: Dec 31, 2004Modified: Apr 16, 2026

2.6

Vector

AV:N/AC:H/Au:N/C:N/I:P/A:N

Exploitability: 4.9 / Impact: 2.9

Source: NVD

Description

Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javascript that uses an invalid URI, modifies the Location field, then uses history.back to navigate to the previous domain, aka NullyFake.

Affected (4)

Products: Microsoft: Ie, Internet Explorer

2 products

Internet Explorer

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Microsoft Ie	Version 6.0 sp1
Microsoft Internet Explorer	Version 5.01
Microsoft Internet Explorer	Version 5.5
Microsoft Internet Explorer	Version 6.0

References (12)

http://archives.neohapsis.com/archives/bugtraq/2004-08/0215.html

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/12304

Source: cve@mitre.org

ExploitVendor Advisory

http://securitytracker.com/id?1010957

Source: cve@mitre.org

Exploit

http://umbrella.name/originalvuln/msie/NullyFake/nullyfake-content.txt

Source: cve@mitre.org

http://www.osvdb.org/8978

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/17007

Source: cve@mitre.org

http://archives.neohapsis.com/archives/bugtraq/2004-08/0215.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://secunia.com/advisories/12304

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitVendor Advisory

http://securitytracker.com/id?1010957

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://umbrella.name/originalvuln/msie/NullyFake/nullyfake-content.txt

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.osvdb.org/8978

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/17007

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.