Phishing Vulnerability in Microsoft Internet Explorer 5.01 to 6

CVE-2006-1192

Summary

Microsoft Internet Explorer versions 5.01 through 6 are vulnerable to an address bar spoofing issue that permits remote attackers to mislead users into thinking they are on a trusted website. This occurs by allowing the persistent display of malicious window content which can replace the legitimate site’s appearance, facilitating phishing attacks and compromising user data security. Users who navigate to a different site after being exposed to a malicious window could be deceived into entering sensitive information, thinking they are interacting with a legitimate web interface.

References