CVE-2006-5913
First published: Wed Nov 15 2006(Updated: )
Microsoft Internet Explorer 7 allows remote attackers to (1) cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/sslnavcancel.htm with the target site in the anchor identifier, which displays the site's URL in the address bar but causes Internet Explorer to report that the certificate is invalid, or (2) trigger a "The webpage no longer exists" report via a link to res://ieframe.dll/http_410.htm, a variant of CVE-2006-5805.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Microsoft Internet Explorer | =7.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2006-5913?
CVE-2006-5913 has a moderate severity rating due to its potential impact on user trust in secure web certificates.
How do I fix CVE-2006-5913?
To mitigate CVE-2006-5913, users should upgrade to a newer version of Microsoft Internet Explorer or switch to a different web browser.
Which software versions are affected by CVE-2006-5913?
CVE-2006-5913 primarily affects Microsoft Internet Explorer version 7.0 on Windows Vista.
What is the exploit method for CVE-2006-5913?
CVE-2006-5913 can be exploited by remote attackers through malicious links that manipulate security certificate validations.
Are there any known attacks utilizing CVE-2006-5913?
While specific attacks leveraging CVE-2006-5913 are not widely documented, the vulnerability poses risks for phishing and trust exploitation.
- agent/references
- agent/severity
- agent/author
- agent/type
- agent/description
- agent/event
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/nvd-index
- agent/software-canonical-lookup-request
- collector/nvd-historical
- agent/weakness
- vendor/microsoft
- canonical/microsoft internet explorer
- version/microsoft internet explorer/7.0