| IE 7 New vulnerability Found ! A weakness has been discovered in Internet Explorer, which can be exploited by malicious
people to conduct phishing attacks.
The problem is that it's possible to display a popup with a somewhat spoofed address bar where a number of special characters have been appended to the URL. This makes it possible to only display a part of the address bar, which may trick users into performing certain unintended actions.
The weakness is confirmed in Internet Explorer 7 on a fully patched Windows XP SP2 system. Solution:
Do not follow links from untrusted sources. Will , I have the JS code that would exploit this hole. If you permit , I can post it here. I mean its just for educational purpose security learning, nothing to help exploiting. |