CVE-2006-1192

Severity: low (CVSS 2.6 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 31.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-04-11 · updated 2026-06-16
Weakness: CWE-20

Description

Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via unknown methods that allow "window content to persist" after the user has navigated to another site, aka the "Address Bar Spoofing Vulnerability." NOTE: this is a different vulnerability than CVE-2006-1626.

Affected products

Canon Network Camera Server Vb101: all versions
Microsoft Ie: 5.01-windows_2000_sp4, 6, 6-sp1, 6-windows_2000_sp4, 6-windows_server_2003_sp1, 6-windows_server_2003_sp1_itanium_systems (+1)
Microsoft Internet Explorer 11: 6-sp1

References

http://secunia.com/advisories/18957
http://securityreason.com/securityalert/670
http://securitytracker.com/id?1015899
http://www.securityfocus.com/bid/17460
http://www.vupen.com/english/advisories/2006/1318
https://docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-013
https://exchange.xforce.ibmcloud.com/vulnerabilities/25557
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1336
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1498
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1645
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1725
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1740

Get alerted when CVE-2006-1192 or the next vulnerability affects your stack