Vulnerability Database
296,747
Total vulnerabilities in the database
CVE-2001-1410
Internet Explorer 6 and earlier allows remote attackers to create chromeless windows using the Javascript window.createPopup method, which could allow attackers to simulate a victim's display and conduct unauthorized activities or steal sensitive data via social engineering.
| Software | From | Fixed in |
|---|---|---|
| microsoft / internet_explorer | 5.5-sp2 | 5.5-sp2.x |
| microsoft / internet_explorer | 5.5 | 5.5.x |
| microsoft / internet_explorer | 5.5-sp1 | 5.5-sp1.x |
| microsoft / internet_explorer | 6.0 | 6.0.x |
- http://marc.info/?l=bugtraq&m=105820229407274&w=2
- http://marc.info/?l=bugtraq&m=105829174431769&w=2
- http://www.doxdesk.com/personal/posts/bugtraq/20030713-ie/
- http://www.guninski.com/popspoof.html
- http://www.kb.cert.org/vuls/id/490708
- http://www.securityfocus.com/archive/1/221883
- http://www.securityfocus.com/bid/3469
- http://www.systemintegra.com/ie-fullscreen/
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7313
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime