CVE-2013-1451

The record

Microsoft Internet Explorer 8 and 9, when the Proxy Settings configuration has the same Proxy address and Port values in the HTTP and Secure rows, does not ensure that the SSL lock icon is consistent with the Address bar, which makes it easier for remote attackers to spoof web sites via a crafted HTML document that triggers many HTTPS requests to an arbitrary host, followed by an HTTPS request to a trusted host and then an HTTP request to an untrusted host, a related issue to CVE-2013-1450.

Affected packages

Related vulnerabilities

• CVE-2026-4433 An SSH misconfigurations exists in Tenable OT that led to the potential exfiltration of… CWE-16
• CVE-2011-2730 VMware SpringSource Spring Framework before 2.5.6.SEC03, 2.5.7.SR023, and 3.x before… CWE-16
• CVE-2012-5613 MySQL 5.5.19 and possibly other versions, and MariaDB 5.5.28a and possibly other… CWE-16
• CVE-2012-0147 Microsoft Forefront Unified Access Gateway (UAG) 2010 SP1 and SP1 Update 1 does not… CWE-16
• CVE-2011-4404 The default configuration of the HTTP server in Jetty in vSphere Update Manager in VMware… CWE-16
• CVE-2011-1652 The default configuration of Microsoft Windows 7 immediately prefers a new IPv6 and… CWE-16
• CVE-2009-0696 The dns_db_findrdataset function in db.c in named in ISC BIND 9.4 before 9.4.3-P3, 9.5… CWE-16
• CVE-2009-2335 WordPress and WordPress MU before 2.8.1 exhibit different behavior for a failed login… CWE-16