CVE-2005-4679 Other in n/a

Medium 5.0 Published Updated

Remote attackers can spoof the URL in the status bar by manipulating image titles in links, potentially misleading users about the destination site.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
A user has to click or open something
Fix
None listed

What is CVE-2005-4679?

CVE-2005-4679 is a medium-severity vulnerability in Microsoft Ie, published on 1 Feb 2006. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Internet Explorer 6 for Windows XP Service Pack 2 allows remote attackers to spoof the URL in the status bar via the title in an image in a link to a trusted site within a form to the malicious site.

Which versions are affected by CVE-2005-4679?

It affects 1 product.

Products include Microsoft Ie.

How do I fix CVE-2005-4679?

No fix has been published for CVE-2005-4679 yet. Limit exposure of the affected software until one is available.

Is CVE-2005-4679 being exploited?

There is no known exploitation of CVE-2005-4679 in the wild and no public exploit code.

All Microsoft Ie vulnerabilities

Sources

Also known as GHSA-6cg9-w42p-2vh6.

Is CVE-2005-4679 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free