CVE-2004-1527 | BDVDB-2026-8313 Detail

Description#

Microsoft Internet Explorer 6.0 SP1 does not properly handle certain character strings in the Path attribute, which can cause it to modify cookies in other domains when the attacker's domain name is within the target's domain name or when wildcard DNS is being used, which allows remote attackers to hijack web sessions.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.lac.co.jp/business/sns/intelligence/SNSadvisory_e/79_e.html
https://exchange.xforce.ibmcloud.com/vulnerabilities/18073
http://secunia.com/advisories/13208
http://marc.info/?l=bugtraq&m=110053968530613&w=2
http://www.securityfocus.com/bid/11680

Exploit#

No public exploit known

History#

Version 12005-02-19Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.