CVE-2010-2454

Apple Safari does not properly manage the address bar between the request to open a URL and the retrieval of the new document's content, which might allow remote attackers to conduct spoofing attacks via a crafted HTML document, a related issue to CVE-2010-1206...

Design/Logic Flaw

Apple Safari does not properly manage the address bar between the request to open a URL and the retrieval of the new document's content, which might allow remote attackers to conduct spoofing attacks via a crafted HTML document, a related issue to CVE-2010-1206...

CVE-2010-2455

Technical details for CVE-2010-2455 are not provided in the supplied documents. The connected Nessus/OpenSUSE advisories reference other CVEs (1205-1215, etc.) but do not elaborate on this specific Opera spoofing issue. Monitor for updates.

CVE-2010-2454

Technical details for CVE-2010-2454 are not provided in the connected documents; only a related issue (CVE-2010-1206) is noted without specifics on affected products, versions, or remediation for this CVE.

CVE-2010-2455

Opera does not properly manage the address bar between the request to open a URL and the retrieval of the new document's content, which might allow remote attackers to conduct spoofing attacks via a crafted HTML document, a related issue to CVE-2010-1206...

CVE-2010-2454

Apple Safari does not properly manage the address bar between the request to open a URL and the retrieval of the new document's content, which might allow remote attackers to conduct spoofing attacks via a crafted HTML document, a related issue to CVE-2010-1206...

CVE-2010-2454

Removed by vendor...

Mozilla Firefox 3.6.4 address bar欺骗漏洞 POC

No description provided by source. http://hi.baidu.com/aullik5/blog/item/ebf24017cf670b4720a4e939.html input type=submit value="Click me!" onclick="clicked" script var w; function clicked w = window.open"http://1.2.3.4/", "blank", "toolbar=1,menubar=1"; setTimeout'w.document.body.innerHTML = "Fak...

Internet Explorer Plugin Loading Address Bar Spoofing (MS06-021; CVE-2006-1626)

Microsoft Internet Explorer is a popular browser that is bundled with the Microsoft Windows family of operating systems. The browser is capable of rendering HTML pages, as well as images and other embedded media, which may be handled by third party plugins. Some of the plugins available to be use...

Internet Explorer OnBeforeUnload JavaScript Address Bar Spoofing (MS07-057; CVE-2007-3826)

Microsoft Internet Explorer IE is a web browser application that is capable of rendering both static and dynamic web content. The application is primarily used for tasks related to web browsing, such as displaying HTML encoded pages, downloading files, etc. An address bar spoofing vulnerability...

Multiple Browsers - Address bar Characters

Multiple Browsers - Address bar Characters Securitylab.ir Application Info: Name: Internet Explorer Version: 8.0 Other tested browsers that also automatically convert "" to "/": - Firefox v3.6 - Google Chrome 4.0.249.78 36714 Vulnerability: IE address bar characters into a small feature My IE 8 o...

Browser address bar characters into a small feature

Exploit for unknown platform in category dos / poc =================================================== Browser address bar characters into a small feature =================================================== Application Info: Name: Internet Explorer Version: 8.0 Other tested browsers that also...

Web fonts can be used to spoof the page address – Opera Security Advisories

In some cases, a Web font intended to be used for page content could be incorrectly used by Opera to render parts of the user interface, including the address field. This can be used by a malicious site to display a false domain name in the address field...

RedHat Security Advisory RHSA-2009:1432

The remote host is missing updates announced in advisory RHSA-2009:1432. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause...

RedHat Security Advisory RHSA-2009:1431

The remote host is missing updates announced in advisory RHSA-2009:1431. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause...

CentOS 3 : seamonkey (CESA-2009:1432)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client,...

seamonkey security update

CentOS Errata and Security Advisory CESA-2009:1431 Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web...

firefox: URL bar spoofing vulnerability

Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the address bar, and possibly conduct phishing attacks, via a crafted web page that calls window.open with an invalid character in the URL, makes document.write calls to the resulting object, and then calls th...

Firefox 3.5.3 3.0.14 Location bar spoofing via tall line-height Unicode characters

Visual truncation vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote attackers to trigger a vertical scroll and spoof URLs via unspecified Unicode characters with a tall line-height property...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...