CVE-2006-5805

Microsoft Internet Explorer 7 allows remote attackers to cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/invalidcert.htm with the target site as an argument, which displays the site's URL in the address bar but causes Internet Explorer to report that the certificate is invalid.

🔗 References (6)

• cve@mitrehttp://ingehenriksen.blogspot.com/2006/11/ie7-website-security-certificate.html
• cve@mitrehttp://securitytracker.com/id?1017165
• cve@mitrehttp://www.securityfocus.com/archive/1/450722/100/0/threaded
• af854a3a-2127-422b-91ae-364da2661108http://ingehenriksen.blogspot.com/2006/11/ie7-website-security-certificate.html
• af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1017165
• af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/archive/1/450722/100/0/threaded