CVE-2006-4092 | BDVDB-2026-18617 Detail

Description#

Simpliciti Locked Browser does not properly limit a user's actions to ones within the intended Internet Explorer environment, which allows local users to perform unauthorized actions by visiting a web site that executes a JavaScript window.blur loop to remove focus from the browser window, then pressing CTRL-SHIFT-ESC to invoke the Task Manager.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/archive/1/444026/100/100/threaded
http://secunia.com/advisories/21321
http://www.securityfocus.com/bid/19304
http://www.securityfocus.com/archive/1/442058/100/100/threaded
http://securityreason.com/securityalert/1365
https://exchange.xforce.ibmcloud.com/vulnerabilities/28224

Exploit#

No public exploit known

History#

Version 12006-08-11Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.