Internet Explorer Page Loading Race Condition and URL Spoofing - Secunia Advisories - Vulnerability Information

Vulnerability Information

Vulnerability Scanning

Community

Blog - new entry!

Corporate Information

Home > Vulnerability Information > Secunia Advisories > Internet Explorer Page Loading Race Condition and URL Spoofing

Secunia Advisories

Advisories

Advisories by Product

Business Solutions Restricted

Partner Solutions Restricted

About

Internet Explorer Page Loading Race Condition and URL Spoofing

Secunia Advisory:

SA25564

Advisory Toolbox:

Issue ticket

Save in to-do list

Mark as handled

Exploit information

Download as PDF

Review actions

Add comment

Release Date:

2007-06-06

Last Update:

2009-06-10

Popularity:

18,509 views

Critical:

Less critical

Impact:

Security Bypass
Spoofing

Where:

From remote

Solution Status:

Vendor Patch

Software:

Microsoft Internet Explorer 6.x
Microsoft Internet Explorer 7.x

Secunia CVSS-2 Score:

Available in Secunia business solutions

Subscribe:

Instant alerts on relevant vulnerabilities

Advisory Content (Page 2 of 3)

[ 1 ] [ 2 ] [ 3 ]

Secunia is hiring, read about the open positions here!

Solution:
Apply patches.

Windows 2000 SP4 with Internet Explorer 6 SP1:
http://www.microsoft.com/downloads/de...=fe8b3796-a407-4f41-89eb-35b4bcc24ff6

Windows XP SP2/SP3 with Internet Explorer 6:
http://www.microsoft.com/downloads/de...=3d7f63ee-d7c3-48a5-902e-60625405e97d

Windows XP Professional x64 Edition SP2 with Internet Explorer 6:
http://www.microsoft.com/downloads/de...=088f70eb-c5c5-426a-880a-18ed386d0b56

Windows Server 2003 SP2 with Internet Explorer 6:
http://www.microsoft.com/downloads/de...=72a23752-86fb-4cc9-ab8e-63ffdfae5bec

Windows Server 2003 x64 Edition SP2 with Internet Explorer 6:
http://www.microsoft.com/downloads/de...=2a03d3c4-e39d-43a3-8d42-216e9551be96

Windows Server 2003 with SP2 for Itanium-based Systems with Internet Explorer 6:
http://www.microsoft.com/downloads/de...=58efde2c-e0b8-4259-b19e-80564b834882

Windows XP SP2/SP3 with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=827b735c-660b-4723-b688-3297e107153a

Windows XP Professional x64 Edition SP2 with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=e5d2c81e-ffab-4e3b-a59a-a55000597213

Windows Server 2003 SP2 with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=a980b867-c67f-4c61-b6db-e55c2ca68dc0

Windows Server 2003 x64 Edition SP2 with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=5e7d6372-9c8c-449d-88fd-afd4f92ad9e6

Windows Server 2003 with SP2 for Itanium-based Systems with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=a2d2907e-67ae-44a4-a805-8670e659ea57

Windows Vista (optionally with Service Pack 1) with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=e60215c3-b8b9-4e45-9d9f-b3fb0b47cce1

Windows Vista SP2 with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=e60215c3-b8b9-4e45-9d9f-b3fb0b47cce1

Windows Vista x64 Edition (optionally with Service Pack 1) with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=88185088-8c2c-4bc6-89b2-87f4d4849cf7

Windows Vista x64 Edition SP2 with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=88185088-8c2c-4bc6-89b2-87f4d4849cf7

Windows Server 2008 for 32-bit Systems with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=a0e3f975-57da-43fa-ac12-3d14fd6ce939

Windows Server 2008 for 32-bit Systems SP2 with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=a0e3f975-57da-43fa-ac12-3d14fd6ce939

Windows Server 2008 for x64-based Systems with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=758edce7-2a82-4b2e-bd71-5b7075cc4b17

Windows Server 2008 for x64-based Systems SP2 with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=758edce7-2a82-4b2e-bd71-5b7075cc4b17

Windows Server 2008 for Itanium-based Systems with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=67d4c189-030d-42eb-98b9-7957ccd92592

Windows Server 2008 for Itanium-based Systems SP2 with Internet Explorer 7:
http://www.microsoft.com/downloads/de...=67d4c189-030d-42eb-98b9-7957ccd92592

Provided and/or discovered by:
Michal Zalewski

Changelog:
2007-06-11: Added CVE reference.
2009-06-09: Updated "Solution" and "Original Advisory" sections.
2009-06-10: Added link to "Original Advisory" section.

Original Advisory:
Microsoft (KB969897):
http://www.microsoft.com/technet/security/Bulletin/MS09-019.mspx

Michal Zalewski
http://archives.neohapsis.com/archives/fulldisclosure/2007-06/0026.html
http://lcamtuf.coredump.cx/ierace/

Other References:
US-CERT VU#471361:
http://www.kb.cert.org/vuls/id/471361

Change Page:
[ 1 ] [ 2 ] [ 3 ]

Track this Secunia Advisory

Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory

Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

27th Nov, 2009

New advisories:	8
New vulnerabilities:	15
Updated advisories:	11

Moderately // 360 views

Robo-FTP Response Processing Buffer Overflow Vulnerability

Less // 314 views

XM Easy Personal FTP Server Denial of Service Vulnerability

Moderately // 409 views

Joomla LyftenBloggie Component "author" SQL Injection Vulnerability

Less // 336 views

DotNetNuke Cross-Site Scripting and Information Disclosure

Moderately // 349 views

Ubuntu update for php5

Moderately // 387 views

Joomla GCalendar Component "gcid" SQL Injection

Moderately // 331 views

RADIO istek scripti Information Disclosure Security Issue

Highly // 358 views

Gentoo update for PEAR-Net_Traceroute

26th Nov, 2009

New advisories:	15
New vulnerabilities:	37
Updated advisories:	48

Moderately // 407 views

Ingate Firewall and SIParator Multiple Vulnerabilities

Moderately // 508 views

SugarCRM Multiple Vulnerabilities

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.