TulipTools Internet Business Owners and Online Sellers Community

Full Version: New IE Flaw Allows Phishers to Spoof IE Address Bar
You're currently viewing a stripped down version of our content. View the full version with proper formatting.
The exploit code for this latest IE security hole is already being used by hackers.  The flaw is rated as moderately critical.

Quote:Hai Nam Luke has discovered a vulnerability in Internet Explorer, which can be exploited by malicious people to conduct phishing attacks.

The vulnerability is caused due to a race condition in the loading of web content and Macromedia Flash Format files (".swf") in browser windows. This can be exploited to spoof the address bar in a browser window showing web content from a malicious web site.

Secunia has constructed a test, which can be used to check if your browser is affected by this issue:
http://secunia.com/Internet_Explorer_Add...lity_Test/

full article: http://secunia.com/advisories/19521/

related topics: take your pick, there's a million topics on IE security flaws  :Smile http://community.tuliptools.com/index.ph...235.0.html