2332 matches found
CVE-2008-1588
Safari on Apple iPhone before 2.0 and iPod touch before 2.0 allows remote attackers to spoof the address bar via Unicode ideographic spaces in the URL...
PT-2008-3144 · Apple · Iphone +2
Name of the Vulnerable Software and Affected Versions: Safari versions prior to 2.0 on Apple iPhone and iPod touch Description: The issue allows remote attackers to spoof the address bar via Unicode ideographic spaces in the URL. Recommendations: For Safari versions prior to 2.0 on Apple iPhone a...
Safari URL spoofing vulnerability
Overview Apple's Safari contains a vulnerability that allows spoofing of URLs in the address bar. Apple's Safari is a web browser installed as default with Mac OS X. There is a problem in Safari where URLs displayed in the address bar could be spoofed to deceive Safari users. This could be...
Microsoft Internet Explorer address bar spoofing vulnerability
Overview Microsoft Internet Explorer contains an address bar spoofing vulnerability. A remote attacker can cause a spoofed content to be displayed in a user's web browser window. The address bar and other parts of the trust user interface can be displayed in the context of a trusted site while th...
Microsoft IE 7 popup window address bar URI spoofing vulnerability-vulnerability warning-the black bar safety net
| Affected versions: Microsoft Internet Explorer 7.0 --- Description: BUGTRAQ ID: 2 8 4 9 8 Internet Explorer is Microsoft's release of the very popular WEB browser. If the user use IE to visit a malicious Web page while the pop-up window's address bar may be any address and the window theme to a...
Design/Logic Flaw
Apple Safari 3.1.1 allows remote attackers to spoof the address bar by placing many "invisible" characters in the userinfo subcomponent of the authority component of the URL aka the user field, as demonstrated by %E3%80%80 sequences...
CVE-2008-1999
CVE-2008-1999 affects Apple Safari 3.1.1, where an attacker can spoof the address bar by inserting numerous invisible characters in the userinfo subcomponent of the URL’s authority (the user field), demonstrated with %E3%80%80. The vulnerability’s impact is spoofing the address bar; the connected...
Microsoft IE 7弹出窗口地址栏URI欺骗漏洞
BUGTRAQ ID: 28498 Internet Explorer是微软发布的非常流行的WEB浏览器。 如果用户用IE访问了恶意网页的话,则弹出窗口的地址栏可能为任意地址而窗口主题中为任意页面或内容。这有助于攻击者执行网络钓鱼攻击。 Microsoft Internet Explorer 7.0 Microsoft --------- 目前厂商还没有提供补丁或者升级程序,我们建议使用此软件的用户随时关注厂商的主页以获取最新版本: http://www.microsoft.com/windows/ie/default.asp script language="JavaScript"...
Internet explorer 7.0 spoofing
Hello, as they are? This time I communicate with you to let you know of a vulnerability such as "spoofing" in the Internet Explorer 7.0 tested at 8.0 and does not work. Creating a pop-up malformated can put any address in the address bar in the body any page or content. This flaw is possible...
Microsoft IE地址栏欺骗漏洞(MS07-057)
BUGTRAQ ID: 25915 CVECAN ID: CVE-2007-3892 Internet Explorer是微软的操作系统中所捆绑的WEB浏览器。 IE在处理地址栏中的数据时存在漏洞,恶意网站可能此利用欺骗用户访问网页。 Internet Explorer中存在一个欺骗漏洞,可能允许攻击者在浏览器窗口中显示欺骗内容。信任UI的地址栏和其他部分已经离开攻击者的网站,但是窗口的内容仍然包含攻击者的网页。 Microsoft Internet Explorer 7.0 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet...
Microsoft Internet Explorer multiple security vulnerabilities
Memory corruption, address bar spoofing...
Code injection
Microsoft Internet Explorer 5.01 through 7 allows remote attackers to spoof the URL address bar and other "trust UI" components via unspecified vectors, a different issue than CVE-2007-1091 and CVE-2007-3826...
Microsoft Internet Explorer Address Bar Spoofing Vulnerability
Description Microsoft Internet Explorer is prone to a vulnerability that lets attackers spoof the address bar of a trusted site. Attackers may exploit this vulnerability via a malicious webpage to spoof the contents and origin of a page that the victim may trust. Attackers may find this issue...
Fedora Core 6 : kdebase-3.5.7-1.fc6 / kdelibs-3.5.7-1.fc6 (2007-716)
The remote Fedora Core host is missing one or more security updates : kdebase-3.5.7-1.fc6 : - Tue Oct 2 2007 Than Ngo - 6:3.5.7-1.fc6 - CVE-2007-4224, CVE-2007-4225, CVE-2007-3820 - rh299741, CVE-2007-4569 - Mon Jul 2 2007 Than Ngo - 6:3.5.7-0.fc6.2 - fix 244906 kdelibs-3.5.7-1.fc6 : - Tue Oct 2...
URL spoof in address bar
KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property...
Spoofing of URI possible in Konqueror's address bar
konqueror/konqcombo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed...
URL spoof in address bar
KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar by calling setInterval with a small interval and changing the window.location property...
Spoofing of URI possible in Konqueror's address bar
konqueror/konqcombo.cc in Konqueror 3.5.7 allows remote attackers to spoof the data: URI scheme in the address bar via a long URI with trailing whitespace, which prevents the beginning of the URI from being displayed...
FreeBSD : konquerer -- address bar spoofing (14ad2a28-66d2-11dc-b25f-02e0185f8d72)
The KDE development team reports : The Konqueror address bar is vulnerable to spoofing attacks that are based on embedding white spaces in the url. In addition the address bar could be tricked to show an URL which it is intending to visit for a short amount of time instead of the current URL...
Use of system agreement when the backdoor-vulnerability warning-the black bar safety net
This morning inadvertently open the xFocus of a cow's BLOG...The New Year's firsthaha. Found a very interesting thing. Is the use of the system in the registered agreement to execute the command. 具体 连接 :http://coolice.blogdriver.com/coolice/414334.html Then I on their own machine experiment:it...