CVE-2006-5805

Published: Nov 8, 2006Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Microsoft Internet Explorer 7 allows remote attackers to cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/invalidcert.htm with the target site as an argument, which displays the site's URL in the address bar but causes Internet Explorer to report that the certificate is invalid.

Affected (1)

Products: Microsoft: Ie

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Ie	Version 7.0

References (6)

http://ingehenriksen.blogspot.com/2006/11/ie7-website-security-certificate.html

Source: cve@mitre.org

Exploit

http://securitytracker.com/id?1017165

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/archive/1/450722/100/0/threaded

Source: cve@mitre.org

http://ingehenriksen.blogspot.com/2006/11/ie7-website-security-certificate.html

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://securitytracker.com/id?1017165

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

http://www.securityfocus.com/archive/1/450722/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.