Secunia Research has reported a vulnerability in iCab, which can be exploited by malicious people to spoof the content of websites.

The problem is that a website can inject content into another site's window if the target name of the window is known. This can e.g. be exploited by a malicious website to spoof the content of a pop-up window opened on a trusted website.

This is related to:
SA11978

Secunia has constructed a test, which can be used to check if your browser is affected by this issue:
http://secunia.com/multiple_browsers_window_injection_vulnerability_test/

The vulnerability has been confirmed in version 2.9.8. Other versions may also be affected.

Solution
The vulnerability has been fixed in version 3.0 Beta.

Provided and/or discovered by
Secunia Research

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://secunia.com/secunia_research/2004-13/advisory/

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers