CVE-2004-0526

{"id": "CVE-2004-0526", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2004-08-06T04:00:00.000", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2004-05/0161.html", "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=108422905510713&w=2", "source": "cve@mitre.org"}, {"url": "http://www.kurczaba.com/securityadvisories/0405132poc.htm", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/10308", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16102", "source": "cve@mitre.org"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2004-05/0161.html", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://marc.info/?l=bugtraq&m=108422905510713&w=2", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.kurczaba.com/securityadvisories/0405132poc.htm", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/10308", "tags": ["Exploit", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16102", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Unknown versions of Internet Explorer and Outlook allow remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified \"alt\" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a \"phishing\" attack."}, {"lang": "es", "value": "Versiones desconocidas de Internet Explorer y Outlook permiten a atacantes remotos suplantar URL leg\u00edtimas en la barra de estado mediante etiquetas A HREF con valores \"alt\" modificados que apuntan al sitio leg\u00edtimo, combinado con un mapa de imagen cuyo HREF apunta al sitio malicioso, lo que facilita ataques de suplantaci\u00f3n para robo de datos (phising)."}], "lastModified": "2024-11-20T23:48:47.450", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:microsoft:ie:6.0:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "24DF2AB3-DEAB-4D70-986E-FFBB7E64B96A"}, {"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E6B8985B-B927-4928-B1DB-18E29F796992"}, {"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A04FEA6-37B0-44B0-844F-55652ABA1F85"}, {"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4D56FB8E-2553-47C1-82A2-9E59023780CE"}, {"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8541EEED-94F4-42F8-9719-57F3EC85D52B"}, {"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40372520-08CF-4F64-A7AC-7E0AE0964138"}, {"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.0.1:sp4:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2EB39B99-91A0-4B70-B12A-BA37F6AFBA83"}, {"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "40F8042F-C621-45AE-9F8C-70469579643A"}, {"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.5:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2CD04E07-3664-4D4F-BF3E-6B33AF0F2D12"}, {"criteria": "cpe:2.3:a:microsoft:internet_explorer:5.5:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D05ED9D0-CF78-4FAD-9371-6FB3D5825148"}, {"criteria": "cpe:2.3:a:microsoft:internet_explorer:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A19F6133-25D1-44A5-B6B9-354703436783"}, {"criteria": "cpe:2.3:a:microsoft:outlook:97:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D1D5CC3A-E880-4727-AEBE-1E4FE5A43AF8"}, {"criteria": "cpe:2.3:a:microsoft:outlook:98:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52970A43-173E-477B-80BF-6FDBB6B0EECD"}, {"criteria": "cpe:2.3:a:microsoft:outlook:2000:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D52F17AB-2C87-4C1A-91B5-267ABBCF5844"}, {"criteria": "cpe:2.3:a:microsoft:outlook:2000:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8A343E57-CF86-4500-96D2-7172B93808BE"}, {"criteria": "cpe:2.3:a:microsoft:outlook:2000:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BBE43EAE-9397-44E4-AE3D-44CEA47699DA"}, {"criteria": "cpe:2.3:a:microsoft:outlook:2000:sr1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "52A5E941-25A7-405E-B330-8101D6829B43"}, {"criteria": "cpe:2.3:a:microsoft:outlook:2002:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3FE6EAE0-5A8F-4A97-950B-879379A3C0F8"}, {"criteria": "cpe:2.3:a:microsoft:outlook:2002:sp1:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D3A4D9C5-A698-4523-8756-5D7EBAA47951"}, {"criteria": "cpe:2.3:a:microsoft:outlook:2002:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D0E20E02-43B2-499B-ADDD-B5B7003894D7"}, {"criteria": "cpe:2.3:a:microsoft:outlook:2002:sp3:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "ACCF73A2-FFD7-41E0-B1BF-E5B4590F51FF"}, {"criteria": "cpe:2.3:a:microsoft:outlook:2003:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "C3189982-F780-4AC2-9663-E6D4DF9DD319"}, {"criteria": "cpe:2.3:a:microsoft:outlook_express:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6764F97F-6906-4953-BB1C-AA6345FA8FBE"}, {"criteria": "cpe:2.3:a:microsoft:outlook_express:4.01:sp2:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B2FEDFE4-ADD1-4B93-ABFC-0F04E0F6572E"}, {"criteria": "cpe:2.3:a:microsoft:outlook_express:4.27.3110:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "3A5A497C-D03E-4666-BFCE-632F9943DB96"}, {"criteria": "cpe:2.3:a:microsoft:outlook_express:4.72.2106:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5D635E46-B428-498D-9C6C-7CA9EB397C96"}, {"criteria": "cpe:2.3:a:microsoft:outlook_express:4.72.3120.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7769EE2E-A740-4AE8-B1B1-A5256C12601D"}, {"criteria": "cpe:2.3:a:microsoft:outlook_express:4.72.3612:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "F6C57670-B009-4C06-BAFD-B5212750F298"}, {"criteria": "cpe:2.3:a:microsoft:outlook_express:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F71D6D7-6CB2-4BE9-839A-A5714144029C"}, {"criteria": "cpe:2.3:a:microsoft:outlook_express:5.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A72832FD-812D-4175-AA50-DC1DDAD5B954"}, {"criteria": "cpe:2.3:a:microsoft:outlook_express:5.5:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "57C8ACA2-A3C6-4435-9C0C-B316879FE1FA"}, {"criteria": "cpe:2.3:a:microsoft:outlook_express:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "85FD3557-956D-4A96-8AA5-5FD9DB87FD11"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}