Slashdot Mirror

← Back to Stories (view on slashdot.org)

New Spoofing Vulnerability in IE

Posted by CowboyNeal on from the url-b-gone dept.

Jimmy M. writes "A new vulnerability has been announced in Internet Explorer, also affecting XP SP2, which can very easily be exploited by a malicious web site to completely spoof the address bar. The vulnerability is very similar to another vulnerability disclosed just about a year ago called the '%00' vulnerability, which also was widely exploited by phishers. A demonstration is also available."

3 of 372 comments (clear)

  1. How long until... by dew4au · · Score: 5, Insightful

    ...people start banging on Firefox hard enough to expose vulnerabilities?

    Or, is Mozilla just that good at plugging leaks before they happen?

  2. Re:Microsoft is so sweet by Anonymous Coward · · Score: 5, Insightful

    What OSS has to do is release ads to TELL people how bad IE is

    never mention your competitor in advertising
    no such thing as bad publicity, people tend to forget the details but "brand reinforcement" still applies, if you have to mention your competitor then it implies your product wont/cant stand up on its own merits = you have LOST

    just an anon advertising exec

  3. Disable ActiveX by OverlordQ · · Score: 5, Insightful

    Disable ActiveX and this wont work. This exploit depends on ActiveX to run.

    --
    Your hair look like poop, Bob! - Wanker.