bugtraq - Internet explorer 7.0 spoofing

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Message-ID: <20080328190217.30597.qmail@securityfocus.com>
Date: 28 Mar 2008 19:02:17 -0000
From: jplopezy@...il.com
To: bugtraq@...urityfocus.com
Subject: Internet explorer 7.0 spoofing

Hello, as they are? This time I communicate with you to let you know of a vulnerability such as "spoofing" in the Internet Explorer 7.0 (tested at 8.0 and does not work). 
Creating a pop-up malformated can put any address in the address bar in the body any page or content. 

This flaw is possible because if in the address bar we eg 

Address # direction 

The numeral makes the first address is run and what comes after the numeral does not interfere with the original page. This is why creating popup with the special measures and to try to pass such an easterly direction popup displayed the end of the address and did not show the direction it runs. (Special measures are important because if it does not work largest). 

Just a single click in the body popup to this reveals the true direction, which can be equal to dodge an event like javascript onblur or onfocus .. Anyway that's more serious an attack that a proof of concept. 

Here I leave the proof of concept.

http://es.geocities.com/jplopezy/iespoof.html

Greetings from Argentina!

Juan Pablo Lopez Yacubian
fuzzertina.blogspot.com