CVE-2004-1104 Information

Description

Microsoft Internet Explorer 6.0 SP2 allows remote attackers to spoof a legitimate URL in the status bar and conduct a phishing attack via a web page that contains a BASE element that points to the legitimate site followed by an anchor (a) element with an empty \href\ attribute and a FORM whose action points to a malicious URL and an INPUT submit element that is modified to look like a legitimate URL.

Reference

http://secunia.com/advisories/11273 http://www.kb.cert.org/vuls/id/702086 http://www.securityfocus.com/archive/1/379903 http://www.securityfocus.com/archive/1/425386/100/0/threaded http://www.securityfocus.com/archive/1/425883/100/0/threaded http://www.securityfocus.com/bid/11565 https://exchange.xforce.ibmcloud.com/vulnerabilities/17938