Bugtraq: RE: Internet Explorer URL parsing vulnerability

["Mimmus" <dviggiani () tiscali it>]

Can any workaround be used at proxy level? 

I.e. can malicious URLs be blocked using Squid?



Thanks in advance

Domenico Viggiani



> -----Original Message-----
> From: bugtraq () zapthedingbat com [mailto:bugtraq () zapthedingbat com]
> Sent: Tuesday, December 09, 2003 3:44 PM
> Subject: Internet Explorer URL parsing vulnerability
>
> Internet Explorer URL parsing vulnerability
> Vendor Notified 09 December, 2003
>
> # Vulnerability ##########
> There is a flaw in the way that Internet Explorer displays 
> URLs in the address bar.
>
> By opening a specially crafted URL an attacker can open a 
> page that appears to be from a different domain from the 
> current location.