exploits , vulnerabilities , articles , Microsoft Internet Explorer 7 Popup Window Address Bar URI Spoofing Vulnerability

Title	Microsoft Internet Explorer 7 Popup Window Address Bar URI Spoofing Vulnerability
Published	2008-03-28-12:00AM
Updated	2008-03-31-04:09PM
Class	Input Validation Error
CVE
Remote	Yes
Local	No
Credit	Juan Pablo Lopez Yacubian
Vulnerable	Microsoft Internet Explorer 7.0 Microsoft Windows Vista Ultimate Microsoft Windows Vista Ultimate Microsoft Windows Vista Ultimate Microsoft Windows Vista Home Premium Microsoft Windows Vista Home Premium Microsoft Windows Vista Home Premium Microsoft Windows Vista Home Basic Microsoft Windows Vista Home Basic Microsoft Windows Vista Home Basic Microsoft Windows Vista Enterprise Microsoft Windows Vista Enterprise Microsoft Windows Vista Enterprise Microsoft Windows Vista Business Microsoft Windows Vista Business Microsoft Windows Vista Business Microsoft Windows Vista 0 Microsoft Windows Vista 0 Microsoft Windows Vista 0 Microsoft Windows Vista 0
Not Vulnerable
Code	To exploit this issue, an attacker must entice an unsuspecting user to view a maliciously crafted web document.The following example exploit is available:http://es.geocities.com/jplopezy/iespoof.html
TXT

Vulnerabilities - newest 10 RSS | More

• 2009-12-10 GNU Coreutils Insecure Temporary File Creation Vulnerability
• 2009-12-10 WebKit SVG Animation Elements User After Free Remote Code Execution Vulnerability
• 2009-12-10 Moodle Multiple Vulnerabilities
• 2009-12-10 Linux Kernel KVM Large SMP Instruction Local Denial of Service Vulnerability
• 2009-12-09 Adobe Flash Player and AIR Data Injection Remote Code Execution Vulnerability
• 2009-12-09 Adobe Flash Player ActiveX Control Information Disclosure Vulnerability
• 2009-12-09 Adobe Flash Player and AIR Multiple Unspecified Remote Code Execution Vulnerabilities
• 2009-12-09 HP OpenView Network Node Manager Multiple Remote Code Execution Vulnerabilities
• 2009-12-09 Shibboleth Redirection URL HTML Injection Vulnerability
• 2009-12-09 VLC Media Player RTSP Remote Buffer Overflow Vulnerability

• Vulnerabilities
• Exploits
• News
• Articles

Copyright 2007, SecurityDot
Fri, 11 Dec 2009 17:45:23 +0000