Description
Internet Explorer 6.0 on Windows XP SP2 allows remote attackers to spoof the domain name of a URL in a titlebar for a script-initiated popup window, which could facilitate phishing attacks.
References
- 20050221 WindowsXPSP2 script-initiated popup window mailing-list
- 14335 third-party-advisory
- ie-title-bar-spoofing(19452) vdb-entry
- 12602 vdb-entry