Slashdot Mirror

← Back to Stories (view on slashdot.org)

New URL Spoofing Bug in Pre-SP2 IE

Posted by CowboyNeal on from the reasons-to-upgrade dept.

An anonymous reader writes "According to Netcraft a new security flaw has been found in Microsoft Internet Explorer which makes it possible to spoof a URL with just some simple HTML code, by enclosing two URLs and a table within a single href tag. The user will be sent to one site, but the status bar will show a fake URL. The bug apparently affects IE and Outlook Express up to but not including SP2. Firefox and Konqueror seem unaffected."

2 of 266 comments (clear)

  1. Lol, Mac fanboys have it too by Xenu+Xenu+Xenu · · Score: 0, Flamebait

    As usual on Slashot, truth takes a back seat to MS bashing

  2. Spoof doesnt work for me by Anonymous Coward · · Score: 0, Flamebait

    Doesnt work for me. IE6 with Windows XP SP2. The status bar shows "www.google.com" and that's where it sends me.

    Whoever said this affects all versions of IE clearly jumped the gun and needs to re-evaluate. When will the apology and retraction be issued? Will it make the front page on Slashdot?