Secunia

Benjamin Tobias Franz has discovered a weakness in Internet Explorer, which can be exploited by malicious people to trick users into visiting a malicious website by obfuscating URLs.

This weakness is a variant of:
SA11273
SA11582

Example:
<a href="http://[trusted_site]/"><table><tr><td><a href="http://[malicious_site]/">Click here</td></tr></table></a>

There are several ways of exploiting this weakness where content inside a link may cause the incorrect link to be shown in the status bar. A variant where an iframe references a document with a link has also been demonstrated.

The problem has been confirmed in version 6.0 on a system running Windows XP with SP1 installed. Other versions may also be affected.

Solution
Systems running Windows XP with SP2 installed are not affected.
Further details available in Customer Area

Provided and/or discovered by
Benjamin Tobias Franz

Changelog
Further details available in Customer Area

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area