Hai Nam Luke has discovered a vulnerability in Internet Explorer, which can be exploited by malicious people to conduct phishing attacks.

Please use the test below, to see an example of how this vulnerability can be exploited, and also to determine whether or not your browser is vulnerable.

The test will try to open Google.com in a new window after a few seconds it will display content controlled by Secunia (or the attacker/phisher).

Start the test:
Test Now - Left Click On This Link

Result
You are vulnerable, if a new window is opened and content from Secunia is displayed while the address bar still says "http://www.google.com/".

You are not vulnerable to this particular exploit, if you do not experience the above behaviour.

Credits
The test is based on Proof of Concept code by Hai Nam Luke.

Please view the Secunia advisory below for information about how you can fix or mitigate the impact of this vulnerability. Secunia will continuously update the Secunia advisory when more information becomes available.

- SA19521 Internet Explorer Window Loading Race Condition Address Bar Spoofing

Companies have the option of requesting a Secunia account for immediate notification when a patch is released by Microsoft.

Request Secunia Account

In order to protect yourself, it is a very good idea to stay informed about the latest threats from vulnerabilities in the software you are using.

Secunia offers a free weekly newsletter, which covers the latest threats from vulnerabilities.

To sign-up for the Secunia Weekly Summary, please enter your email address in the field below and submit the form:

Email Address: