CVE-2004-2260

Opera Browser 7.23 and other versions before 7.50 are affected by an address-bar spoofing weakness. The root cause is a JavaScript-based onUnload/unOnload handling during page redirects, which can cause the address bar to display a spoofed domain and mislead users. This vulnerability could enable...

CVE-2004-2260

Opera Browser 7.23, and other versions before 7.50, updates the address bar as soon as the user clicks a link, which allows remote attackers to redirect to other sites via the onUnload attribute...

CVE-2004-2219: Undefined Security Weakness

Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javascript that uses an invalid URI, modifies the Location field, then uses history.back to navigate to the previous domain, aka NullyFake...

IEurlflaw.txt

All, The following very simple! code calls a URL in the browser window but fails to update the address bar in IE. Looks like the form submission is suspended with the interrupt of the 'window.alert' call. IE then fails to correctly handle. Might be helpful in facilitating phishing style attacks...

Multiple Internet Explorer bugs

CSS buffer overflow, local zone scripting, buffer overflow in Install Engine, writing file to any location with drag and drop or scripting in img tag, address bar spoofing, SSL crossite scripting...

CVE-2004-2219

Microsoft Internet Explorer 6 allows remote attackers to spoof the address bar to facilitate phishing attacks via Javascript that uses an invalid URI, modifies the Location field, then uses history.back to navigate to the previous domain, aka NullyFake...

CVE-2004-0844

Internet Explorer 6 on Double Byte Character Set DBCS systems allows remote attackers to alter displayed address bars and spoof web pages via a URL containing special characters, facilitating phishing attacks, aka the "Address Bar Spoofing on Double Byte Character Set Systems Vulnerability."...

CVE-2004-0843

Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and thereby spoof web pages, facilitating phishing attacks, aka the "Plug-in Navigation Address Bar Spoofing Vulnerability."...

CVE-2004-0844

Internet Explorer 6 on Double Byte Character Set DBCS systems allows remote attackers to alter displayed address bars and spoof web pages via a URL containing special characters, facilitating phishing attacks, aka the "Address Bar Spoofing on Double Byte Character Set Systems Vulnerability."...

CVE-2004-0843

CVE-2004-0843 is a Plug-in Navigation Address Bar Spoofing vulnerability in Internet Explorer (IE 5.01/5.5/6 families). A remote attacker could cause the address bar to show a URL different from the loaded page via plug‑ins, enabling phishing-like deception. The connected OpenVAS entries confirm ...

CVE-2004-0844

CVE-2004-0844 describes an address bar spoofing vulnerability in Internet Explorer 6 on Double Byte Character Set (DBCS) locales. A canonicalization error in how IE parses certain characters in an HTTP URL could cause the address bar to display a different URL from the actual loaded page, enablin...

CVE-2004-0843

Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and thereby spoof web pages, facilitating phishing attacks, aka the "Plug-in Navigation Address Bar Spoofing Vulnerability."...

CVE-2004-0843: Undefined Security Weakness

Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and thereby spoof web pages, facilitating phishing attacks, aka the "Plug-in Navigation Address Bar Spoofing Vulnerability."...

CVE-2004-0844: Undefined Security Weakness

Internet Explorer 6 on Double Byte Character Set DBCS systems allows remote attackers to alter displayed address bars and spoof web pages via a URL containing special characters, facilitating phishing attacks, aka the "Address Bar Spoofing on Double Byte Character Set Systems Vulnerability."...

Microsoft Internet Explorer vulnerable to address bar spoofing on double byte character set systems

Overview Microsoft Internet Explorer contains a vulnerability in how it processes URLs on Double Byte Character Set DBCS systems. This could allow an attacker to spoof the address of a web site. Description Microsoft Internet Explorer contains a canonicalization error when it parses special...

Microsoft Internet Explorer Plug-in Navigations Handling Address Bar Spoofing Vulnerability

Description It is reported that Microsoft Internet Explorer is prone to a vulnerability that may allow a malicious Web page containing embedded flash multimedia to spoof the address bar of the browser. This could be used to lure Web users into a false sense of trust since a malicious or spoofed...

Microsoft Internet Explorer Double Byte Character Set Handling Address Bar Spoofing Vulnerability

Description It is reported that Microsoft Internet Explorer is prone to a vulnerability that may allow a malicious Web page to spoof the address bar of the browser. This vulnerability presents itself due to a malfunction that occurs when certain double byte characters are encountered. As a result...

Opera < 7.51 favicon.ico Address Bar Spoofing

The version of Opera is vulnerable to a security weakness that may permit malicious web pages to spoof address bar information. It is reported that the 'favicon' feature can be used to spoof the domain of a malicious web page. An attacker can create an icon that includes the text of the desired...

Opera < 7.50 onUnload Address Bar Spoofing

The remote host is using Opera - an alternative web browser. This version of Opera is vulnerable to a security weakness that may permit malicious web pages to spoof address bar information. This is reportedly possible through malicious use of the JavaScript 'unOnload' event handler when the brows...

Opera < 7.54 Multiple Function Address Bar Spoofing

The version of Opera installed on the remote host is vulnerable to a flaw wherein a remote attacker can obscure the URI, leading the user to believe that he/she is accessing a trusted resource. To exploit this issue, an attacker would need to set up a rogue website, then entice a local user to...