CVE-2006-5913: Medium severity Microsoft ie vulnerability
Microsoft Internet Explorer 7 allows remote attackers to (1) cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/sslnavcancel.htm with the target site in the anchor identifier, which displays the site's URL in the address bar but causes Internet Explorer to report that the certificate is invalid, or (2) trigger a "The webpage no longer exists" report via a link to res://ieframe.dll/http410.htm, a variant of CVE-2006-5805.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-5913?
CVE-2006-5913 has a moderate severity rating due to its potential impact on user trust in secure web certificates.
How do I fix CVE-2006-5913?
To mitigate CVE-2006-5913, users should upgrade to a newer version of Microsoft Internet Explorer or switch to a different web browser.
Which software versions are affected by CVE-2006-5913?
CVE-2006-5913 primarily affects Microsoft Internet Explorer version 7.0 on Windows Vista.
What is the exploit method for CVE-2006-5913?
CVE-2006-5913 can be exploited by remote attackers through malicious links that manipulate security certificate validations.
Are there any known attacks utilizing CVE-2006-5913?
While specific attacks leveraging CVE-2006-5913 are not widely documented, the vulnerability poses risks for phishing and trust exploitation.