IE phishing exploit..
There is ANOTHER IE vulnerability that’s come across the news in the last week. It seems that this is currently only a Proof of Concept, I’ll have to check and see if anyone’s reported seeing this in the wild…, but essentially a race condition between a Macromedia flash file and web content can allow a forged address bar location… in other words it might say www.google.com in the address bar, but you’re actually looking at www.evilhackerplayground.org….
Turning off active scripting is a workaround at this point. (Or alternative browsers I suppose…)
Popularity: 1% [?]
Similar Posts
- Another critical IE flaw
- Windows Vista virus
- Firefox 1.5 vulnerability
- Exploits a plenty - IE / Excel (Firefox?)
- IE exploit unofficial patches