TUCoPS :: Browsers :: hack7784.htm

Internet Explorer URL obfuscation.
Internet Explorer URL obfuscation.


The following (very simple!) code calls a URL in the browser window but
fails to update the address bar in IE. Looks like the form submission is
suspended with the interrupt of the 'window.alert' call. IE then fails
to correctly handle.

Might be helpful in facilitating phishing style attacks. Assuming you
can spoof the original location.

I'm running windows XP SP2 with all the latest patches. It works
correctly in FireFox (i.e. the address bar does update).

Not sure if this really is a vulnerability, but would appreciate any


Graeme Stewart


--snip--- P.S My apologies if this is a known vuln. I did do some searching (i.e. Google!, but nothing similar came up). ----------------------------------------------------------------------- The information transmitted is intended only for the person or entity to which it is addressed and may contain confidential and/or privileged material. Any review, retransmission, dissemination or other use of, or taking of any action in reliance upon, this information by persons or entities other than the intended recipient is prohibited. If you received this in error, please contact the sender and delete the material from any computer.

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH