Multiple Browsers Frame Injection Vulnerability
- 0
- Add a Comment
- No Related Post
“A 6 year old vulnerability has been discovered in multiple browsers, allowing malicious people to spoof the content of websites. The problem is that the browsers don’t check if a target frame belongs to a website containing a malicious link, which therefore doesn’t prevent one browser window from loading content in a named frame in another window. Successful exploitation allows a malicious website to load arbitrary content in an arbitrary frame in another browser window owned by e.g. a trusted site….Secunia has constructed a test, which can be used to check if your browser is affected by this issue.” This issue affects Internet Explorer 5.x for Mac, Konqueror 3.x, Mozilla 0.x, Mozilla 1.0, Mozilla 1.1, Mozilla 1.2, Mozilla 1.3, Mozilla 1.4, Mozilla 1.5, Mozilla 1.6, Mozilla Firefox 0.x, Netscape 6.x, Netscape 7.x, Opera 5.x, Opera 6.x, Opera 7.x, Safari 1.x. “Other versions may also be affected.”
