Technology news and Jobs 
Information Technology News Secunia claims another IE7 vulnerability
Information Technology News Secunia claims another IE7 vulnerability | Secunia claims another IE7 vulnerability |
|
| by Stan Beer | |
| Thursday, 26 October 2006 | |
  
Featured Whitepaper
5 Best Practices for Smartphone Support
Acording to Secunia, the latest problem involves a vulnerability which involves spoofing a URL in the address bar. "The problem is that it's possible to display a popup with a somewhat spoofed address bar where a number of special characters have been appended to the URL. This makes it possible to only display a part of the address bar, which may trick users into performing certain unintended actions," the Secunia advisory reads. Secunia has constructed a demonstration, which is available at the following address and says in its advisory that he weakness is confirmed in Internet Explorer 7 on a fully patched Windows XP SP2 system. "These are the kind of spoofing vulnerabilities, which IE7 was supposed to be better at protecting against than its predecessor," said Secunia chief technology officer, Thomas Kristensen , in an email to iTWire. "While the issue isn't clear cut since the vigilant (paranoid?) user might be able to spot that something isn't quite right, then any user not wearing the paranoid glasses is easily fooled by this trick - despite the built-in anti-phishing mechanism being enabled," Kristensen added. {moscomment} |
Tags
| < Next story in category | Previous story in the category > |
|---|
