CVE-2006-2384
Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct...
Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing attacks by using a modal browser window in a way that preserves the original address bar and trusted UI of a trusted site, even after the browser has been navigated to a malicious site, aka the "Address Bar Spoofing Vulnerability."
Exploit likelihood
What each source reports
NVD Score used
Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing attacks by using a modal browser window in a way that preserves the original address bar and trusted UI of a trusted site, even after the browser has been navigated to a malicious site, aka the "Address Bar Spoofing Vulnerability."
- Record
CVE-2006-2384- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:P/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing attacks by using a modal browser window in a way that preserves the original address bar and trusted UI of a trusted site, even after the browser has been navigated to a malicious site, aka the "Address Bar Spoofing Vulnerability."
- Record
CVE-2006-2384- Updated
- 2026-11-02
EUVDEUVD-2006-2385 No score
Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing attacks by using a modal browser window in a way that preserves the original address bar and trusted UI of a trusted site, even after the browser has been navigated to a malicious site, aka the "Address Bar Spoofing Vulnerability."
- Record
EUVD-2006-2385- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-9cgg-c8pg-gh35 No score
Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct...
Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing attacks by using a modal browser window in a way that preserves the original address bar and trusted UI of a trusted site, even after the browser has been navigated to a malicious site, aka the "Address Bar Spoofing Vulnerability."
- Record
GHSA-9cgg-c8pg-gh35- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-2384 is a medium vulnerability (CVSS 4.3) in Microsoft Internet Explorer, published June 13, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 19.2%, the 97th percentile. No source names a fixed version.
References
secunia.com/advisories/20595
vupen.com/english/advisories/2006/2319
securitytracker.com/id?1016291
securityfocus.com/bid/18321
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1567
osvdb.org/26445
Show 9 moreShow less
exchange.xforce.ibmcloud.com/vulnerabilities/26777
docs.microsoft.com/en-us/security-updates/securitybulletins/2006/ms06-021
nvd.nist.gov/vuln/detail/CVE-2006-2384
github.com/advisories/GHSA-9cgg-c8pg-gh35