CVE-2006-1191: Medium severity Microsoft Internet Explorer vulnerability
Microsoft Internet Explorer 5.01 through 6 does not always correctly identify the domain that is associated with a browser window, which allows remote attackers to obtain sensitive cross-domain information and spoof sites by running script after the user has navigated to another site.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-1191?
CVE-2006-1191 is classified as a moderate severity vulnerability.
How do I fix CVE-2006-1191?
To mitigate CVE-2006-1191, users should upgrade to a more recent version of Internet Explorer or apply any available security patches.
What types of attacks can exploit CVE-2006-1191?
CVE-2006-1191 can be exploited to perform cross-domain attacks and spoofing by executing scripts in the context of a user's browser.
Which versions of Internet Explorer are affected by CVE-2006-1191?
CVE-2006-1191 affects Internet Explorer versions 5.01, 5.5, 5.1, and 6.0.
What are the potential impacts of CVE-2006-1191?
The potential impacts of CVE-2006-1191 include unauthorized access to sensitive data and user session hijacking.