Description
Visual truncation vulnerability in Microsoft Internet Explorer 7 allows remote attackers to spoof the address bar and possibly conduct phishing attacks via a malicious URL containing non-breaking spaces (%A0), which causes the address bar to omit some characters from the URL.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://www.securityfocus.com/bid/20728 ↗
- http://www.securityfocus.com/archive/1/449917/100/0/threaded ↗
- http://www.kb.cert.org/vuls/id/347188 ↗
- http://blogs.technet.com/msrc/archive/2006/10/26/ie-address-bar-issue.aspx ↗
- http://securitytracker.com/id?1017122 ↗
- http://secunia.com/advisories/22542 ↗
- http://secunia.com/internet_explorer_7_popup_address_bar_spoofing_test/ ↗
- http://www.osvdb.org/30022 ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29827 ↗