Apple Safari 1.2 Web Browser - TABLE Status Bar URI Obfuscation

Apple Safari 1.2 Web Browser - TABLE Status Bar URI Obfuscation source: https://www.securityfocus.com/bid/11573/info A URI obfuscation weakness reportedly affects the Apple Safari Web Browser. This issue may be leveraged by an attacker to display false information in the status bar of an...

Apple Safari 1.2 Web Browser - TABLE Status Bar URI Obfuscation

source: https://www.securityfocus.com/bid/11573/info A URI obfuscation weakness reportedly affects the Apple Safari Web Browser. This issue may be leveraged by an attacker to display false information in the status bar of an unsuspecting user, allowing an attacker to present web pages to users th...

Microsoft Internet Explorer 6 - HTML Form Tags URI Obfuscation

Microsoft Internet Explorer 6 - HTML Form Tags URI Obfuscation source: https://www.securityfocus.com/bid/11565/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. The issue is due to a failure of the affected application to properly handle specially crafted HTML anch...

Microsoft Internet Explorer 6 - HTML Form Tags URI Obfuscation

source: https://www.securityfocus.com/bid/11565/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. The issue is due to a failure of the affected application to properly handle specially crafted HTML anchor URI tags and various form tags. This issue may be leveraged ...

Microsoft Internet Explorer 6 - TABLE Status Bar URI Obfuscation

Microsoft Internet Explorer 6 - TABLE Status Bar URI Obfuscation source: https://www.securityfocus.com/bid/11561/info Microsoft Internet Explorer is reported prone to a URI obfuscation weakness. This issue may be leveraged by an attacker to display false information in the status bar of an...

CVE-2004-0844

Internet Explorer 6 on Double Byte Character Set DBCS systems allows remote attackers to alter displayed address bars and spoof web pages via a URL containing special characters, facilitating phishing attacks, aka the "Address Bar Spoofing on Double Byte Character Set Systems Vulnerability."...

CVE-2004-0843

CVE-2004-0843 is a Plug-in Navigation Address Bar Spoofing vulnerability in Internet Explorer (IE 5.01/5.5/6 families). A remote attacker could cause the address bar to show a URL different from the loaded page via plug‑ins, enabling phishing-like deception. The connected OpenVAS entries confirm ...

CVE-2004-0844

CVE-2004-0844 describes an address bar spoofing vulnerability in Internet Explorer 6 on Double Byte Character Set (DBCS) locales. A canonicalization error in how IE parses certain characters in an HTTP URL could cause the address bar to display a different URL from the actual loaded page, enablin...

CVE-2004-0843

Internet Explorer 5.5 and 6 does not properly handle plug-in navigation, which allows remote attackers to alter displayed address bars and thereby spoof web pages, facilitating phishing attacks, aka the "Plug-in Navigation Address Bar Spoofing Vulnerability."...

Microsoft Internet Explorer vulnerable to address bar spoofing on double byte character set systems

Overview Microsoft Internet Explorer contains a vulnerability in how it processes URLs on Double Byte Character Set DBCS systems. This could allow an attacker to spoof the address of a web site. Description Microsoft Internet Explorer contains a canonicalization error when it parses special...

Microsoft Internet Explorer Plug-in Navigations Handling Address Bar Spoofing Vulnerability

Description It is reported that Microsoft Internet Explorer is prone to a vulnerability that may allow a malicious Web page containing embedded flash multimedia to spoof the address bar of the browser. This could be used to lure Web users into a false sense of trust since a malicious or spoofed...

Microsoft Internet Explorer Double Byte Character Set Handling Address Bar Spoofing Vulnerability

Description It is reported that Microsoft Internet Explorer is prone to a vulnerability that may allow a malicious Web page to spoof the address bar of the browser. This vulnerability presents itself due to a malfunction that occurs when certain double byte characters are encountered. As a result...

IE6 + XP SP2 Vulnerability

Background information ====================== Windows XP Service Pack 2 has introduced new features that improve browsing security in Internet Explorer. Most of them are additional messages that force the user to validate everything that is done by the browser. Most of these messages are displaye...

CVE-2004-1686

Internet Explorer 6.0 in Windows XP SP2 allows remote attackers to bypass the Information Bar prompt for ActiveX and Javascript via an XHTML page that contains an Internet Explorer formatted comment between the DOCTYPE tag and the HTML tag, as demonstrated using the DesignScience MathPlayer Activ...

CVE-2003-0023

The menuBar feature in rxvt 2.7.8 allows attackers to modify menu options and execute arbitrary commands via a certain character escape sequence that inserts the commands into the menu...

Mozilla Firefox < 3.0.11 Multiple Vulnerabilities

Binary data 5072.prm...

Opera < 7.51 favicon.ico Address Bar Spoofing

The version of Opera is vulnerable to a security weakness that may permit malicious web pages to spoof address bar information. It is reported that the 'favicon' feature can be used to spoof the domain of a malicious web page. An attacker can create an icon that includes the text of the desired...

Opera < 7.50 onUnload Address Bar Spoofing

The remote host is using Opera - an alternative web browser. This version of Opera is vulnerable to a security weakness that may permit malicious web pages to spoof address bar information. This is reportedly possible through malicious use of the JavaScript 'unOnload' event handler when the brows...

Opera < 7.54 Multiple Function Address Bar Spoofing

The version of Opera installed on the remote host is vulnerable to a flaw wherein a remote attacker can obscure the URI, leading the user to believe that he/she is accessing a trusted resource. To exploit this issue, an attacker would need to set up a rogue website, then entice a local user to...

bitlanceOpera.txt

A vulnerability is found in the Opera browser version 7.51 , which can be exploited by spammers to spoof information displayed in the address bar.Tested on Windows OS. Demonstration HTML source code: ======== begin ======== !DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" html...