OSVDB ID: 17397 Title: Multiple Browser Javascript Dialog Origin Spoofing |
Info |
|
|
Dates |
||||
|
|
Description |
Multiple web browsers contain a Javascript flaw that may lead to an unauthorized password exposure or other information disclosure. It is possible for a malicious web site to open a dialog box in front of a window displaying a trusted web site. It may appear that the dialog box comes from the trusted web site prompting users to enter passwords or other sensitive information, which may lead to a loss of confidentiality. |
Classification |
Location:
Remote/Network Access Required
Attack Type: Information Disclosure Impact: Loss of Confidentiality Exploit: Exploit Available Disclosure: OSVDB Verified |
Solution |
Upgrade to version iCab 3.0 or higher, or Opera 8.01 or higher, as it has been reported to fix this vulnerability. Future versions of other affected products may also fix this vulnerability. Check with your browser vendor for the latest updates. Microsoft has issued a statement that this is standard web browser behaviour and will not be fixed. It may also be possible to avoid the flaw by being careful to not browse untrusted web sites while also browsing trusted sites. |
Products |
|
Credit |
|
secunia.com - Secunia Research