Secunia finds new browser flaw
Posted: Fri Jun 24, 2005 3:18 am
Secunia Research has discovered a vulnerability in various browsers, which can be exploited by malicious web sites to spoof dialog boxes.
The problem is that JavaScript dialog boxes do not display or include their origin, which allows a new window to open e.g. a prompt dialog box, which appears to be from a trusted site.
[url=\"http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/\"][u]Secunia Vulnerability Test[/u][/url]
The problem is that JavaScript dialog boxes do not display or include their origin, which allows a new window to open e.g. a prompt dialog box, which appears to be from a trusted site.
[url=\"http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/\"][u]Secunia Vulnerability Test[/u][/url]