[34921] in bugtraq
Microsoft Internet Explorer ImageMap URL Spoof Vulnerability
daemon@ATHENA.MIT.EDU (Kurczaba Associates advisories)
Mon May 17 15:14:30 2004
Message-ID: <40A90108.9000301@kurczaba.com>
Date: Mon, 17 May 2004 14:14:32 -0400
From: Kurczaba Associates advisories <advisories@kurczaba.com>
MIME-Version: 1.0
To: bugtraq@securityfocus.com
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Microsoft Internet Explorer ImageMap URL Spoof Vulnerability
http://www.kurczaba.com/securityadvisories/0405132.htm
-------------------------------------------------------------
Vulnerability ID Number:
0405132
Overview:
A vulnerability has been found in Microsoft Internet Explorer. A
specially coded ImageMap can be used to spoof the URL displayed in the
lower, left hand corner of the browser.
Vendor:
Microsoft (http://www.microsoft.com)
Affected Systems/Configuration:
The versions affected by this vulnerability are Microsoft Internet
Explorer 5 and 6.
Vulnerability/Exploit:
An ImageMap can be used to spoof the URL displayed in the lower, left
hand of the browser. View the "Proof of Concept" example for details.
Workaround:
None so far.
Proof of Concept:
http://www.kurczaba.com/securityadvisories/0405132poc.htm
Date Discovered:
May 13, 2004
Severity:
High
Credit:
Paul Kurczaba
Kurczaba Associates
http://www.kurczaba.com/
