Description
Microsoft Internet Explorer 6 allows remote attackers to spoof the URL bar, and page properties including SSL certificates, by interrupting page loading through certain use of location DOM objects and setTimeout calls. NOTE: this issue can be leveraged for phishing and other attacks.
References
- 45437 vdb-entry
- 1018193 vdb-entry
- 25564 third-party-advisory
- 20070604 Assorted browser vulnerabilities mailing-list
- 20070604 Assorted browser vulnerabilities mailing-list
- http://lcamtuf.coredump.cx/ietrap2/
- 2781 third-party-advisory
- ie-location-url-spoofing(34705) vdb-entry
- 24298 vdb-entry