CVE-2007-3142

CVE-2007-3142 affects Opera 9.21, where a visual truncation of a long hostname can spoof the address bar and enable phishing (demonstrated via HTTP Basic Authentication). The Gentoo GLSA advisory recommends upgrading to Opera ≥ 9.23 to resolve the issue. No exploit details are provided beyond the...

CVE-2007-3145

Visual truncation vulnerability in Galeon 2.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication...

CVE-2007-3143

CVE-2007-3143 affects Konqueror 3.5.5. The issue is a visual truncation vulnerability in the address bar: when a long hostname is shown, it is truncated, which can allow remote attackers to spoof the URL and potentially conduct phishing attacks (notably demonstrated via HTTP Basic Authentication)...

CVE-2007-3144

The CVE-2007-3144 entry describes a visual truncation flaw in Mozilla 1.7.12 where a long hostname is truncated in the address bar, allowing remote attackers to spoof the URL and potentially conduct phishing attacks (e.g., via HTTP Basic Authentication). Affected component is Mozilla’s UI renderi...

CVE-2007-4225

Visual truncation vulnerability in KDE Konqueror 3.5.7 allows remote attackers to spoof the URL address bar via an http URI with a large amount of whitespace in the user/password portion...

Microsoft Internet Explorer and Mozilla Firefox multiple security vulnerabilities

Internet Explorer race conditions allow cross domain access. Mozilla Firefox IFRAME cross domain access. Mozilla file download dialogs delay protection bypass. MSIE address bar spoofing...

Design/Logic Flaw

Mozilla Firefox 2.0.0.2 allows remote attackers to spoof the address bar, favicons, and document source, and perform updates in the context of arbitrary websites, by repeatedly setting document.location in the onunload attribute when linking to another website, a variant of CVE-2007-1092...

CVE-2007-1256

Mozilla Firefox 2.0.0.2 allows remote attackers to spoof the address bar, favicons, and document source, and perform updates in the context of arbitrary websites, by repeatedly setting document.location in the onunload attribute when linking to another website, a variant of CVE-2007-1092...

CVE-2007-1256

Mozilla Firefox 2.0.0.2 allows remote attackers to spoof the address bar, favicons, and document source, and perform updates in the context of arbitrary websites, by repeatedly setting document.location in the onunload attribute when linking to another website, a variant of CVE-2007-1092...

CVE-2007-1256

CVE-2007-1256 affects Mozilla Firefox 2.0.0.2. A malicious page can spoof the address bar, favicons, and document source by repeatedly setting document.location in the onunload attribute when navigating to another site, a variant of CVE-2007-1092. Affected component: Firefox; vulnerable behavior:...

CVE-2007-1256

Mozilla Firefox 2.0.0.2 allows remote attackers to spoof the address bar, favicons, and document source, and perform updates in the context of arbitrary websites, by repeatedly setting document.location in the onunload attribute when linking to another website, a variant of CVE-2007-1092...

Multiple browsers OnUnload event handler different vulnerabilities

Different memory corruptions because of race conditions in OnUnload handler. In addition address bar spoofing and creation of pages can not be left is possible...

CVE-2007-1091

Microsoft Internet Explorer 7 allows remote attackers to prevent users from leaving a site, spoof the address bar, and conduct phishing and other attacks via onUnload Javascript handlers...

CVE-2007-1091

Summary (based on provided documents): CVE-2007-1091 is a vulnerability in Internet Explorer 7 that allows remote attackers to spoof the address bar and prevent users from leaving a site via onUnload Javascript handlers, enabling phishing-like attacks. The vulnerability is discussed alongside rel...

Secunia Research: Internet Explorer 7 "onunload" Event Spoofing Vulnerability

====================================================================== Secunia Research 23/02/2007 - Internet Explorer 7 "onunload" Event Spoofing Vulnerability - ====================================================================== Table of Contents Affected...

With ASP Trojan FTP and decompression-vulnerability warning-the black bar safety net

In broilers placed on the website,the most troublesome is probably the update and upload a lot of files, Terminal Services broad daylight easy to be found,open your own ftp and not assured. Your own online in a circle is found by combining the non-component upload asp Trojan can be easily achieve...

CVE-2006-5913

Microsoft Internet Explorer 7 allows remote attackers to 1 cause a security certificate from a secure web site to appear invalid via a link to res://ieframe.dll/sslnavcancel.htm with the target site in the anchor identifier, which displays the site's URL in the address bar but causes Internet...

MS Internet Explorer 7 Popup Address Bar Spoofing Weakness

No description provided by source. !-- Secunia Advisory: SA22542 Release Date: 2006-10-25 Impact: Spoofing Solution Status: Unpatched Software: Microsoft Internet Explorer 7.x Description: A weakness has been discovered in Internet Explorer, which can be exploited by malicious people to conduct...

Microsoft Internet Explorer地址栏欺骗漏洞（MS06-013）

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer的地址栏和其他可信任UI部分离开攻击者站点后，窗口内容可能仍是攻击者的页面。这样就可以在浏览器窗口中显示欺骗内容，方便网络钓鱼攻击。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 5.0 SP4 Microsoft Internet Explorer 6.0 - Microsoft Windows XP SP2 - Microsoft Windows Server 2003 SP1 ...

Internet Explorer窗口加载竞争条件地址栏欺骗漏洞(MS06-021)

如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 配置Internet Explorer在运行活动脚本之前要求提示，或在Internet和本地intranet安全区中禁用活动脚本。 将Internet和本地intranet安全区设置为“高”以在运行ActiveX控件和活动脚本之前要求提示。 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS06-021）以及相应补丁: MS06-021：Cumulative Security Update for Internet Explorer 916281...