----------------------------------------------------------------------

Want a new job?

http://secunia.com/secunia_security_specialist/
http://secunia.com/hardcore_disassembler_and_reverse_engineer/

International Partner Manager - Project Sales in the IT-Security
Industry:
http://corporate.secunia.com/about_secunia/64/

----------------------------------------------------------------------

TITLE:
Internet Explorer 7 Frame Location Handling Vulnerability

SECUNIA ADVISORY ID:
SA30851

VERIFY ADVISORY:
http://secunia.com/advisories/30851/

CRITICAL:
Moderately critical

IMPACT:
Security Bypass, Spoofing

WHERE:
>From remote

SOFTWARE:
Microsoft Internet Explorer 7.x
http://secunia.com/product/12366/

DESCRIPTION:
sirdarckcat has discovered a vulnerability in Internet Explorer,
which can be exploited by malicious people to conduct spoofing
attacks.

The problem is that it is possible for a website to modify the
location of another frame in another window by setting the location
to an object instead of a string. This can be exploited to load
malicious content into a frame of a trusted website.

This may be a variant of:
SA11966

The vulnerability is confirmed in IE7. Other versions may also be
affected.

SOLUTION:
Do not visit or follow links from untrusted websites.

PROVIDED AND/OR DISCOVERED BY:
sirdarckcat

ORIGINAL ADVISORY:
http://sirdarckcat.blogspot.com/2008/05/ghosts-for-ie8-and-ie75730.html
http://sirdarckcat.blogspot.com/2008/05/browsers-ghost-busters.html

OTHER REFERENCES:
GNUCITIZEN:
http://www.gnucitizen.org/blog/ghost-busters/

SA11966:
http://secunia.com/advisories/11966/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------