Description
Visual truncation vulnerability in Mozilla 1.7.12 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a long hostname, which is truncated after a certain number of characters, as demonstrated by a phishing attack using HTTP Basic Authentication.
References
- 24352 vdb-entry
- 43466 vdb-entry
- multiple-basic-authentication-spoofing(34983) vdb-entry
- http://testing.bitsploit.de/test.html
- http://www.0x000000.com/?i=334