Re: New URL spoofing bug in Microsoft Internet Explorer

From: Christopher J. Pilkington (christopher.j.pilkington_at_gmail.com)
Date: 10/29/04

  • Next message: Jérôme: "Re: New URL spoofing bug in Microsoft Internet Explorer" 
    Date: Thu, 28 Oct 2004 20:15:19 -0400
To: "0-1-2-3@gmx.de" <0-1-2-3@gmx.de>

    Under IE 6.0.2900.2180, this does not occur as you describe.

    If the mouse pointer is pointed to the edge around the link,
    "http://www.microsoft.com" is displayed, but when the pointer is
    directly over the link, "http://www.google.com" is correctly
    displayed.

    On Thu, 28 Oct 2004 23:38:16 +0200, 0-1-2-3@gmx.de <0-1-2-3@gmx.de> wrote:
    > New URL spoofing bug in Microsoft Internet Explorer
    >
    > There is a security bug in Internet Explorer 6.0.2800.1106 (fully patched),
    > which allowes to show any faked target-address in the status bar of the
    > window.
    >
    > The example below will display a faked URL ("http://www.microsoft.com/") in
    > the status bar of the window, if you move your mouse over the link. Click
    > on the link and IE will go to "http://www.google.com/" and NOT to
    > "http://www.microsoft.com/" .
    >
    > <a href="http://www.microsoft.com/"><table><tr><td><a
    > href="http://www.google.com/">Click here</td></tr></table></a>
    >
    > Description: Microsoft Internet Explorer can't handle links surrounded by a
    > table and an other link correct.
    >
    > The bug can be exploited using HTML mail message too.
    >
    > Affected software: Microsoft Internet Explorer, Microsoft Outlook Express,
    > ...
    >
    > Workaround: Don't click on non-trusted links. Or right-click on links to
    > see the real target. Or use Copy-and-Paste.
    >
    > Regards,
    > Benjamin Tobias Franz
    > Germany
    >
    >

  • Next message: Jérôme: "Re: New URL spoofing bug in Microsoft Internet Explorer"

    Relevant Pages

    • RE: cursor has background horizintal lines
      ... I've had a One inch square black bar, looks like a bar code that replaces the ... pointer inside each window. ...
      (microsoft.public.windowsxp.help_and_support)
    • Re: Auto-hide the task bar: bar wont pop up
      ... Right click taskbar, properties, tick "keep the taskbar on top ...". ... > pointer, the start menu pops up nicely. ... > a window maximized on the screen, the start bar does not ...
      (microsoft.public.windowsxp.general)
    • e-mail window (Scenario 1)
      ... Behind the open window you can see your desktop*. ... more distance that your mouse pointer can travel. ... Consider the title bar a window "handle" and your mouse ... mouse button, your "grip" is released. ...
      (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
    • Re: Express Scribe question
      ... > down the left mouse button and drag the window a little off screen (to the ... > and try to place it on the upper corner edge of the window so the pointer ... Keep holding down on the mouse and drag ... > you get it to the size you want, you can drag the title bar to where you ...
      (sci.med.transcription)
    • Re: Moderate this group
      ... >> Could you give us a pointer to those itrc forums. ... >> that would like a moderated forum) ... And you have to be using Microsoft Internet Explorer to do that. ... and got a pointer to a webpage with assorted ...
      (comp.os.vms)