Microsoft Internet Explorer地址栏欺骗漏洞（MS06-013）

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer的地址栏和其他可信任UI部分离开攻击者站点后，窗口内容可能仍是攻击者的页面。这样就可以在浏览器窗口中显示欺骗内容，方便网络钓鱼攻击。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 5.0 SP4 Microsoft Internet Explorer 6.0 - Microsoft Windows XP SP2 - Microsoft Windows Server 2003 SP1 ...

Internet Explorer窗口加载竞争条件地址栏欺骗漏洞(MS06-021)

如果您不能立刻安装补丁或者升级，NSFOCUS建议您采取以下措施以降低威胁： 配置Internet Explorer在运行活动脚本之前要求提示，或在Internet和本地intranet安全区中禁用活动脚本。 将Internet和本地intranet安全区设置为“高”以在运行ActiveX控件和活动脚本之前要求提示。 厂商补丁： Microsoft --------- Microsoft已经为此发布了一个安全公告（MS06-021）以及相应补丁: MS06-021：Cumulative Security Update for Internet Explorer 916281...

Microsoft Internet Explorer一致模式对话窗口地址栏欺骗漏洞（MS06-021）

Microsoft Internet Explorer是微软发布的非常流行的WEB浏览器。 Internet Explorer中存在地址栏欺骗漏洞，如果用户访问了恶意的站点的话，浏览器窗口可能仍保留着原始的地址栏和可信任站点的用户界面，而实际上浏览器可能已经导航到了恶意的站点。这就允许攻击者发动钓鱼类的攻击。 Microsoft Internet Explorer 6.0 SP1 Microsoft Internet Explorer 6.0 Microsoft Internet Explorer 5.0 SP4 临时解决方法： 配置Internet...

Microsoft Windows Internet Explorer地址栏伪造漏洞(MS04-038)

Microsoft Internet Explorer是一款流行的WEB浏览器。 Microsoft Internet Explorer处理部分URL时存在问题，远程攻击者可以利用这个漏洞伪造地址，欺骗用户。 在双字节字符设置系统中的Microsoft Internet Explorer处理部分URL存在问题，攻击者可以导致不正确的URL列在地址栏中，而非实际用户要访问的URL，造成一定的欺骗，可能导致用户访问恶意站点，泄露敏感信息。 Microsoft Internet Explorer 6.0SP1 Microsoft Internet Explorer 5.5SP2 Microso...

CVE-2006-5544

Visual truncation vulnerability in Microsoft Internet Explorer 7 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a malicious URL containing non-breaking spaces %A0, which causes the address bar to omit some characters from the URL...

CVE-2006-5544

CVE-2006-5544 describes a visual truncation vulnerability in Microsoft Internet Explorer 7 where a malicious URL containing non-breaking spaces (%A0) causes the address bar to omit characters, enabling possible address bar spoofing and phishing. The vulnerability is tied to the address bar render...

CVE-2006-5544

Visual truncation vulnerability in Microsoft Internet Explorer 7 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a malicious URL containing non-breaking spaces %A0, which causes the address bar to omit some characters from the URL...

Microsoft Internet Explorer 7 may allow address bar spoofing

Overview Internet Explorer 7 may allow address bar spoofing in pop-up windows. This could let an attacker spoof the address of a web site. Description Internet Explorer 7 includes a new feature called "Address bar protection." This makes sure that every window, including pop-ups, will present an...

Microsoft Internet Explorer 7弹出窗口地址栏欺骗漏洞

Internet Explorer是微软发布的非常流行的WEB浏览器。 IE 7在处理URL中字符串时存在漏洞，远程攻击者可能利用此漏洞引导用户执行恶意操作。 如果用户跟随了恶意链接的话，Internet Explorer所显示的弹出窗口中地址栏的URL可能会附加有一些特殊的字符。这可能导致只显示部分地址栏，诱骗用户执行非预期的操作。 Microsoft Internet Explorer 7.0 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://www.microsoft.com/windows/ie/default.asp...

Multiple Microsoft Internet Explorer security vulnerabilities

Multiple memory corruptions, address bar spoofing, cross-frame data access. May be used for hidden malware installation...

JVN#74969119 Microsoft Internet Explorer address bar spoofing vulnerability

Impact An user could be navigated to visit an untrusted malicous website even though the user intends to visit a trusted website. Therefore an attacker could possibly conduct a physing attack. Solution Products Affected Microsoft Internet Explorer For more information, refer to the vendor's websi...

CVE-2006-2384

CVE-2006-2384 corresponds to Internet Explorer address bar spoofing: IE 5.01 SP4, 6 SP1 and earlier can display a trusted UI while navigating to a malicious site, enabling phishing-like spoofing. The vulnerability arises from a method that preserves the address bar/trust UI after navigation. Micr...

CVE-2006-2384: Exposure of Sensitive Information to an Unauthorized Actor

Microsoft Internet Explorer 5.01 SP4 and 6 SP1 and earlier allows remote attackers to conduct spoofing and phishing attacks by using a modal browser window in a way that preserves the original address bar and trusted UI of a trusted site, even after the browser has been navigated to a malicious...

Microsoft Internet Explorer Persistent Modal Dialog Window Address Bar Spoofing Vulnerability

...

Spoofing

Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via unknown methods that allow "window content to persist" after the user has navigated to another site, aka the "Address Bar Spoofing...

CVE-2006-1192

CVE-2006-1192 refers to an Address Bar Spoofing vulnerability in Internet Explorer 5.01–6 where phishing could be facilitated by persisting window content and trust UI after navigation, allowing a malicious page to display a legitimate URL while loading content from another site. The Connected do...

Microsoft Internet Explorer Persistent Window Content Address Bar Spoofing Vulnerability

Description Microsoft Internet Explorer is prone to address-bar spoofing. Attackers may exploit this via a malicious web page to spoof the contents of a page that the victim may trust. This vulnerability may be useful in phishing or other attacks that rely on content spoofing. Technologies Affect...

CVE-2006-1192: Improper Input Validation

Microsoft Internet Explorer 5.01 through 6 allows remote attackers to conduct phishing attacks by spoofing the address bar and other parts of the trust UI via unknown methods that allow "window content to persist" after the user has navigated to another site, aka the "Address Bar Spoofing...

CVE-2006-1650

Firefox 1.5.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading. NOTE: a followup was...

Design/Logic Flaw

Firefox 1.5.0.1 allows remote attackers to spoof the address bar and possibly conduct phishing attacks by re-opening the window to a malicious Shockwave Flash application, then changing the window location back to a trusted URL while the Flash application is still loading. NOTE: a followup was...