Secunia Research has discovered a vulnerability in Internet Explorer, which can be exploited by a malicious website to spoof the address bar.

The vulnerability is caused due to an error in Internet Explorer's handling of "onunload" events, enabling a malicious website to abort the loading of a new website. This can be exploited to spoof the address bar if e.g. the user enters a new website manually in the address bar, which is commonly exercised as best practice.

The vulnerability is confirmed on a fully patched Windows XP SP2 system running Internet Explorer 7 or Internet Explorer 6. Other versions may also be affected.

Solution
Apply patches.
Further details available to Secunia VIM customers

Provided and/or discovered by
Originally discovered by:
* Jakob Balle, Secunia Research

Independently discovered and publicly disclosed by:
* Michal Zalewski

Changelog
Further details available to Secunia VIM customers

Original Advisory
MS07-057 (KB939653):
http://www.microsoft.com/technet/security/Bulletin/MS07-057.mspx

Secunia Research:
http://secunia.com/secunia_research/2007-1/

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers