Internet Explorer "document.open()" Method Spoofing Vulnerability - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0)

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

Internet Explorer "document.open()" Method Spoofing Vulnerability

Secunia Advisory:	SA26069
Release Date:	2007-07-16
Last Update:	2007-10-09

Critical:	Less critical
Impact:	Spoofing
Where:	From remote
Solution Status:	Vendor Patch

Software:	Microsoft Internet Explorer 7.x

CVE reference:	CVE-2007-3826 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Description: Michal Zalewski has discovered a vulnerability in Internet Explorer, which can be exploited by a malicious website to spoof the address bar. The vulnerability is caused due to an error in the handling of the "document.open()" method and can be exploited to spoof the address bar if e.g. the user enters a new website manually in the address bar, which is commonly exercised as best practice. The vulnerability is confirmed on a fully patched Windows XP SP2 system running Internet Explorer 7. Other versions may also be affected. Do you have this product installed on your home computer? Scan using the free Personal Software Inspector. Check if a vulnerable version is installed on computers in your corporate network, using the Network Software Inspector. Solution: Apply patches. Windows XP SP2 and Internet Explorer 7: http://www.microsoft.com/downloads/de...=4CA0AC93-BF51-40FE-A1BA-CB3E0A36D8B5 Windows XP Professional x64 Edition (optionally with SP2) and Internet Explorer 7: http://www.microsoft.com/downloads/de...=DBD284D0-2664-42A4-AD16-A0535244C81C Windows Server 2003 SP1/SP2 and Internet Explorer 7: http://www.microsoft.com/downloads/de...=0A31C451-32F4-4551-AE45-D600F8B3B11B Windows Server 2003 x64 Edition (optionally with SP2) and Internet Explorer 7: http://www.microsoft.com/downloads/de...=C1915633-D181-4CA1-A4F0-7CA0F865AA72 Windows Server 2003 with SP1/SP2 for Itanium-based systems and Internet Explorer 7: http://www.microsoft.com/downloads/de...=093A2250-3BE3-494F-80E0-89CA7217030F Windows Vista and Internet Explorer 7: http://www.microsoft.com/downloads/de...=86392E8D-098C-427F-A233-699CDB9375AE Windows Vista x64 Edition and Internet Explorer 7: http://www.microsoft.com/downloads/de...=62490E6D-0A21-4A15-90BD-63CA8F8886B6 Provided and/or discovered by: Michal Zalewski Changelog: 2007-07-19: Added CVE reference. 2007-10-09: Updated "Solution" section. Added link to Microsoft security bulletin. Original Advisory: MS07-057 (KB939653): http://www.microsoft.com/technet/security/Bulletin/MS07-057.mspx http://lists.grok.org.uk/pipermail/full-disclosure/2007-July/064636.html



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

29 Related Secunia Security Advisories, displaying 10

1. Internet Explorer 7 Frame Location Handling Vulnerability

2. Internet Explorer "substringData()" Memory Corruption Vulnerability

3. Internet Explorer "DisableCachingOfSSLPages" Weakness

4. Internet Explorer "Print Table of Links" Cross-Zone Scripting

5. Internet Explorer HTTP Request Smuggling/Splitting Vulnerabilities

6. Microsoft Internet Explorer Multiple Vulnerabilities

7. Internet Explorer Multiple Code Execution Vulnerabilities

8. Microsoft Web Proxy Auto-Discovery Feature Security Issue

9. Internet Explorer Data Stream Handling Vulnerability

10. Internet Explorer Unspecified Address Bar Spoofing Vulnerability

Show all related advisories

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Mozilla Firefox Multiple Vulnerabilities

2.	Opera for Windows Unspecified Code Execution

3.	VLC Media Player WAV Processing Integer Overflow

4.	Mozilla Thunderbird Multiple Vulnerabilities

5.	Opera Canvas Functions Information Disclosure

6.	PCRE pcre_compile.c Buffer Overflow Vulnerability

7.	Novell eDirectory ds.dlm Module Buffer Overflow

8.	Drupal Organic groups Information Disclosure and Script Insertion

9.	UnixWare ReliantHA Privilege Escalation Vulnerabilities

10.	XchangeBoard "boardID" SQL Injection Vulnerability