CVE-2004-0528

Netscape Navigator 7.1 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified "alt" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a "phishing" attack.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:N/I:P/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact NONE

Integrity Impact PARTIAL

Availability Impact NONE

References

Link	Resource
http://www.osvdb.org/6580
http://www.securityfocus.com/bid/10389	Exploit Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16102
http://www.osvdb.org/6580
http://www.securityfocus.com/bid/10389	Exploit Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16102

Configurations

Configuration 1 (hide)

cpe:2.3:a:netscape:navigator:7.1:*:*:*:*:*:*:*

History

20 Nov 2024, 23:48

Type	Values Removed	Values Added
References	~~() http://www.osvdb.org/6580 -~~	() http://www.osvdb.org/6580 -
References	~~() http://www.securityfocus.com/bid/10389 - Exploit, Vendor Advisory~~	() http://www.securityfocus.com/bid/10389 - Exploit, Vendor Advisory
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/16102 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/16102 -

Information

Published : 2004-08-06 04:00

Updated : 2024-11-20 23:48

NVD link : CVE-2004-0528

Mitre link : CVE-2004-0528

CVE.ORG link : CVE-2004-0528

JSON object : View

Products Affected

netscape

navigator

CWE

NVD-CWE-Other

{"id": "CVE-2004-0528", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2004-08-06T04:00:00.000", "references": [{"url": "http://www.osvdb.org/6580", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/10389", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16102", "source": "cve@mitre.org"}, {"url": "http://www.osvdb.org/6580", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/10389", "tags": ["Exploit", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16102", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Netscape Navigator 7.1 allows remote attackers to spoof a legitimate URL in the status bar via A HREF tags with modified \"alt\" values that point to the legitimate site, combined with an image map whose href points to the malicious site, which facilitates a \"phishing\" attack."}, {"lang": "es", "value": "Netscape Navigator 7.1 permite a atacantes remotos suplantar URL leg\u00edtimas en la barra de estado mediante etiquetas A HREF con valores \"alt\" modificados que apuntan al sitio leg\u00edtimo, combinado con un mapa de imagen cuyo HREF apunta al sitio malicioso, lo que facilita ataques de suplantaci\u00f3n para robo de datos (phising)\"."}], "lastModified": "2024-11-20T23:48:47.737", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:netscape:navigator:7.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "4C1BC491-9C5A-46D5-B6C3-5A8E5A1A0AF3"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}