Microsoft Internet Explorer Location Object Webpage 欺骗漏洞

漏洞信息详情

Microsoft Internet Explorer 6允许远程攻击者通过破坏由对位置DOM对象和setTimeout调用的特定使用加载的页，来欺骗URL栏和包含SSL证书的页特性。注意：该漏洞可用于钓鱼和其他攻击。

目前厂商已经发布了升级补丁以修复此安全问题，补丁获取链接：

http://windows.microsoft.com/en-US/internet-explorer/products/ie/home

来源:FULLDISC

链接:http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html

来源:BID

链接:https://www.securityfocus.com/bid/24298

来源:OSVDB

链接:http://osvdb.org/45437

来源:BUGTRAQ

链接:http://www.securityfocus.com/archive/1/470446/100/0/threaded

来源:SECTRACK

链接:http://securitytracker.com/id?1018193

来源:SECUNIA

链接:http://secunia.com/advisories/25564

来源:SREASON

链接:http://securityreason.com/securityalert/2781

来源:XF

链接:https://exchange.xforce.ibmcloud.com/vulnerabilities/34705

来源:MISC

链接:http://lcamtuf.coredump.cx/ietrap2/