oval:org.mitre.oval:def:1251

Definition Id: oval:org.mitre.oval:def:1251

Oval ID:	oval:org.mitre.oval:def:1251
Title:	IE6 Cross-Domain Information Disclosure Vulnerability (WinXP)
Description:	Microsoft Internet Explorer 5.01 through 6 does not always correctly identify the domain that is associated with a browser window, which allows remote attackers to obtain sensitive cross-domain information and spoof sites by running script after the user has navigated to another site.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2006-1191	Version:	5
Platform(s):	Microsoft Windows XP	Product(s):	Microsoft Internet Explorer
Definition Synopsis:
Windows XP (64-bit,SP1 or 32-bit,SP2) is installed Windows XP 32 bit Service Pack 2 Win2K/XP/2003/Vista/2008 Service Pack 2 is installed AND Windows XP 32-bit edition is installed Windows XP is installed AND 32-Bit version of Windows is installed OR Windows XP 64-bit with Service Pack 1 Windows XP is installed AND a version of Windows for the ia64 architecture is installed AND Win2K/XP/2003/Vista service pack 1 is installed AND the version of mshtml.dll is less than 6.0.2900.2873