All Browsers But IE At Risk To New Spoofing Scheme
A newly uncovered vulnerability in most browsers can allow hackers to spoof the URL displayed in the address bar and the SSL certificate, a security firm warned Monday.
The one exception? Microsoft's Internet Explorer.
Danish security company Secunia posted an alert describing the vulnerability -- which affects Mozilla, Firefox, Safari, Opera, and Konqueror -- as a "moderately critical" problem.
The vulnerability impacts every browser built atop the open-source Geko browser kernel -- nearly all except IE -- because of a flaw in handling International Domain Names (IDN).
Hackers can register domain names with certain international characters that resemble other commonly-used characters, said Secunia, to spoof the address and trick the user into thinking they're at a legitimate site and/or it's secured by SSL.
Such spoofing vulnerabilities are typically exploited by phishers who try to dupe users into divulging financial information at bogus Web sites that resemble real-life banking, credit card, or retail sites.
The vulnerability has been confirmed in the latest version of Firefox, v. 1.0, as well as in Mozilla 1.7.5, Opera 7.54u1, Opera 7.54u2, Safari 1.2.4, Konqueror 3.2.2, and Netscape 7.2.
Other editions of these browsers, however, may also be at risk, said Secunia, which posted an online test on its Web site.
Currently, none of the vendors have provided fixes for the flaw.
[url=\"http://www.techweb.com/wire/security/59301618\"]source[/url]
All Browsers But IE At Risk To New Spoofing Scheme
Moderators: Moderator, Global Moderator
All Browsers But IE At Risk To New Spoofing Scheme
[color=\"#41211C\"]It takes years to build up trust and only seconds to destroy it
[/color]
All Browsers But IE At Risk To New Spoofing Scheme
is in shock <img src=\'http://www.killanet.net/forum3/public/s ... ocking.gif\' class=\'bbc_emoticon\' alt=\'(ack)\' /> goes and gets some C4 from the killanet basement and sets it under Internet explorer lets see how it takes the C4 [img]http://img79.exs.cx/img79/2876/blowiebyestunt9kt.gif[/img]
Firefox all the way[img]http://img57.exs.cx/img57/8852/20301014 ... 08f0cy.png[/img]
Firefox all the way[img]http://img57.exs.cx/img57/8852/20301014 ... 08f0cy.png[/img]
All Browsers But IE At Risk To New Spoofing Scheme
Its ironic that IE has been saved because its outdated <img src=\'http://www.killanet.net/forum3/public/s ... #>/dry.gif\' class=\'bbc_emoticon\' alt=\'<_<\' />
Good work latin, keep at it <img src=\'http://www.killanet.net/forum3/public/s ... iggrin.gif\' class=\'bbc_emoticon\' alt=\':D\' />
Good work latin, keep at it <img src=\'http://www.killanet.net/forum3/public/s ... iggrin.gif\' class=\'bbc_emoticon\' alt=\':D\' />
