Description
By default, Internet Explorer 5.0 and other versions enables the "Navigate sub-frames across different domains" option, which allows frame spoofing.
Affected products
- Microsoft / ie4.0 – 4.0
- Microsoft / internet_explorer3.0 – 3.0
- Microsoft / internet_explorer3.0.2 – 3.0.2
- Microsoft / internet_explorer3.1 – 3.1
- Microsoft / internet_explorer3.2 – 3.2
- Microsoft / internet_explorer4.0 – 4.0
- Microsoft / internet_explorer4.0.1 – 4.0.1
- Microsoft / internet_explorer4.1 – 4.1
- Microsoft / internet_explorer4.5 – 4.5
- Microsoft / internet_explorer5.0 – 5.0
- netscape / navigator4.5