Vulnerability Details : CVE-2006-5805
Potential exploit
Microsoft Internet Explorer 7 allows remote attackers to cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/invalidcert.htm with the target site as an argument, which displays the site's URL in the address bar but causes Internet Explorer to report that the certificate is invalid.
Products affected by CVE-2006-5805
- cpe:2.3:a:microsoft:ie:7.0:*:vista:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2006-5805
2.15%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 83 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2006-5805
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
5.0
|
MEDIUM | AV:N/AC:L/Au:N/C:N/I:P/A:N |
10.0
|
2.9
|
NIST |
References for CVE-2006-5805
-
http://ingehenriksen.blogspot.com/2006/11/ie7-website-security-certificate.html
http://ingehenriksen.blogspot.com/Exploit
-
http://securitytracker.com/id?1017165
Exploit
-
http://www.securityfocus.com/archive/1/450722/100/0/threaded
Jump to