By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing.
| Software | From | Fixed in |
|---|---|---|
| microsoft / internet_explorer | 3.0 | 3.0.x |
| microsoft / internet_explorer | 3.0.2 | 3.0.2.x |
| microsoft / internet_explorer | 3.1 | 3.1.x |
| microsoft / internet_explorer | 3.2 | 3.2.x |
| microsoft / internet_explorer | 4.0 | 4.0.x |
| microsoft / internet_explorer | 4.0.1-sp2 | 4.0.1-sp2.x |
| microsoft / internet_explorer | 4.1 | 4.1.x |
| microsoft / internet_explorer | 4.5 | 4.5.x |
| microsoft / internet_explorer | 5.0 | 5.0.x |
| netscape / navigator | - | 4.5.x |
| microsoft / ie | 4.0-a_mac_os | 4.0-a_mac_os.x |