CVE-2004-2219
Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate...
Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javascript that uses an invalid URI, modifies the Location field, then uses history.back to navigate to the previous domain, aka NullyFake.
Exploit likelihood
What each source reports
NVD Score used
Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javascript that uses an invalid URI, modifies the Location field, then uses history.back to navigate to the previous domain, aka NullyFake.
- Record
CVE-2004-2219- CVSS 2.0
- 2.6 Low
AV:N/AC:H/Au:N/C:N/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javascript that uses an invalid URI, modifies the Location field, then uses history.back to navigate to the previous domain, aka NullyFake.
- Record
CVE-2004-2219- Updated
- 2026-11-02
EUVDEUVD-2004-2211 No score
Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javascript that uses an invalid URI, modifies the Location field, then uses history.back to navigate to the previous domain, aka NullyFake.
- Record
EUVD-2004-2211- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-6h6g-c44w-h3r2 No score
Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate...
Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javascript that uses an invalid URI, modifies the Location field, then uses history.back to navigate to the previous domain, aka NullyFake.
- Record
GHSA-6h6g-c44w-h3r2- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2004-2219 is a low vulnerability (CVSS 2.6) in Microsoft Ie, published December 31, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 8.13%, the 94th percentile. No source names a fixed version.
References
archives.neohapsis.com/archives/bugtraq/2004-08/0215.html
secunia.com/advisories/12304
osvdb.org/8978
exchange.xforce.ibmcloud.com/vulnerabilities/17007
umbrella.name/originalvuln/msie/NullyFake/nullyfake-content.txt
securitytracker.com/id?1010957
nvd.nist.gov/vuln/detail/CVE-2004-2219
github.com/advisories/GHSA-6h6g-c44w-h3r2