Slashdot Mirror

← Back to Stories (view on slashdot.org)

New URL Spoofing Bug in Pre-SP2 IE

Posted by CowboyNeal on from the reasons-to-upgrade dept.

An anonymous reader writes "According to Netcraft a new security flaw has been found in Microsoft Internet Explorer which makes it possible to spoof a URL with just some simple HTML code, by enclosing two URLs and a table within a single href tag. The user will be sent to one site, but the status bar will show a fake URL. The bug apparently affects IE and Outlook Express up to but not including SP2. Firefox and Konqueror seem unaffected."

2 of 266 comments (clear)

  1. Right by Safety+Cap · · Score: 0, Offtopic
    We all know how you want to work for Microsoft when you graduate from high school, but Mrs. Phelps in Science said she wasn't going to pass you unless you turned in all your homework.

    Man, that's like 3, 2-page papers!!! Better use 1.75" spacing and 1.25" margins and 14 point type.

    --
    Yeah, right.
  2. Just like /. by kuzb · · Score: 0, Offtopic

    Why are we ever talking about this? It has already been patched.

    --
    BeauHD. Worst editor since kdawson.