IE7 spoofing....

[Dr Mordrid]

http://www.theregister.com/2006/10/26/ie7_spoofing_bug/

Phisherman's friend

By John Leyden
Published Thursday 26th October 2006 10:57 GMT

Security researchers have identified a pop-up address bar spoofing weakness in Microsoft's newly released Internet Explorer 7 browser. The flaw, first reported by security notification firm Secunia, might lend itself to phishing attacks and remains currently unpatched.

The security bug creates a means for hackers to display a popup with partially spoofed address bar where a number of special characters have been appended to a URL. Only part of the address bar will be displayed, creating a possible mechanism to trick users into believing they are visiting a trusted site rather than one controlled by hackers.

[az]

I know I'm preaching to the choir here, but have a look at the statistics:

IE 7:



FF 1.x (2.x is too young; there have been no advisories yet):


Opera 9:

[ND66]

I know I'm preaching to the choir here, but have a look at the statistics:

IE 7:



FF 1.x (2.x is too young; there have been no advisories yet):


Opera 9:

.... ....!

.