OSVDB ID: 30022 Title: Microsoft IE Non-breaking Spaces Popup Address Bar Spoofing |
Info |
|
|
Dates |
||||
|
|
Description |
Microsoft Internet Explorer contains a flaw related to the way it displays urls in the address bar of pop-up windows that may allow an attacker to spoof the address bar and possibly conduct phishing attacks via a malicious URL containing non-breaking spaces (%A0). |
Classification |
Location:
Remote / Network Access
Attack Type: Input Manipulation Impact: Loss of Integrity Solution: Workaround Exploit: Exploit Public Disclosure: OSVDB Verified |
Solution |
Currently, there are no known upgrades or patches to correct this issue. It is possible to correct the flaw by implementing the following workaround(s): Click on the address bar in the pop up window and scroll to the left to see the url of the page. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |