CVE-2004-0719: High severity Microsoft ie vulnerability

Published Jul 23, 2004

Updated

Internet Explorer for Mac 5.2.3, Internet Explorer 6 on Windows XP, and possibly other versions, does not properly prevent a frame in one domain from injecting content into a frame that belongs to another domain, which facilitates web site spoofing and other attacks, aka the frame injection vulnerability.

Affected Software

10 affected components

Microsoft ie=6.0-sp1

Microsoft Internet Explorer=5.5-sp2

Microsoft Internet Explorer=5.0.1

Microsoft Internet Explorer=5.0.1-sp2

Microsoft Internet Explorer=5.0.1-sp3

Microsoft Internet Explorer=5.0.1-sp4

Microsoft Internet Explorer=5.0.1-sp1

Microsoft Internet Explorer=5.5

Microsoft Internet Explorer=5.5-sp1

Microsoft Internet Explorer=6.0

Remediation

Patch Available

http://secunia.com/advisories/11966

Event History

Jul 23, 2004

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-0719?

CVE-2004-0719 is considered a moderate severity vulnerability due to its potential for web site spoofing and other attacks.

How do I fix CVE-2004-0719?

To fix CVE-2004-0719, users should upgrade to a newer version of Internet Explorer or apply official patches provided by Microsoft.

What software is affected by CVE-2004-0719?

CVE-2004-0719 affects various versions of Internet Explorer including 5.0.1 through 6.0, with specific service packs.

What type of attacks can exploit CVE-2004-0719?

Exploiting CVE-2004-0719 can facilitate web site spoofing, allowing attackers to inject malicious content into a trusted site.

Is CVE-2004-0719 relevant to modern browsers?

CVE-2004-0719 is not relevant to modern browsers as it specifically affects older versions of Internet Explorer.