Secunia - Stay Secure
Gartner
Home Corporate Website Jobs Updated Mailing Lists RSS Blog  Online Shop Advertise
Software Inspectors
  Scan Online
  Personal (PSI)
  Network (NSI 2.0)

Solutions For
  Security Professionals
  Security Vendors

Free Solutions For
  Open Communities
  Journalists & Media

Secunia Advisories
  Search
  Historic Advisories
  Listed By Product
  Listed By Vendor
  Statistics / Graphs
  Secunia Research
  Report Vulnerability
  About Advisories

Virus Information
  Chronological List
  Last 10 Virus Alerts
  About Virus Information

Secunia Customers
  Customer Area


Internet Explorer uspecificeret addressbar-spoofing Advisory Available in English  Advisory Available in German 

Secunia Advisory: SA27133  
Udsendt: 2007-10-09
Sidste Opdt.: 2007-10-10

Kritisk:
Mindre kritisk
Betydning: Forfalskning
Hvor: Fra Internet
Løsning Status: Producent Patch

Software:Microsoft Internet Explorer 5.01
Microsoft Internet Explorer 6.x
Microsoft Internet Explorer 7.x

CVE reference:CVE-2007-3892 (Secunia mirror)

Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS!


Beskrivelse:
Der er rapporteret en sårbarhed i Internet Explorer, som kan udnyttes af ondsindede websites til at forfalske information i adressebaren.

Sårbarheden skyldes en uspecificeret fejl og muliggør visning af forfalsket indhold i browser-vinduet, mens andre dele af browserens "trust UI" kan referere et website, der haves tillid til.

Do you have this product installed on your home computer? Scan using the free Personal Software Inspector. Check if a vulnerable version is installed on computers in your corporate network, using the Network Software Inspector.

Løsning:
Installér patches.

Windows 2000 SP4 and Internet Explorer 5.01 SP4:
http://www.microsoft.com/downloads/de...=95827F3F-A984-4E34-A949-D16A0614121A

Windows 2000 SP4 and Internet Explorer 6 SP1:
http://www.microsoft.com/downloads/de...=DF3BA596-7C5B-4151-9884-6957AA884AAB

Windows XP SP2 and Internet Explorer 6:
http://www.microsoft.com/downloads/de...=513A8320-6D36-4FC9-A38A-867192B55B53

Windows XP Professional x64 Edition (optionally with SP2) and Internet Explorer 6:
http://www.microsoft.com/downloads/de...=AE8A26D8-1910-4B8C-8A73-6E2FA6B5B29F

Windows Server 2003 SP1/SP2 and Internet Explorer 6:
http://www.microsoft.com/downloads/de...=4AEFAA38-8757-4E6E-8924-57CABD1C2FC3

Windows Server 2003 x64 Edition (optionally with SP2) and Internet Explorer 6:
http://www.microsoft.com/downloads/de...=88ABA9DD-653B-4CDF-A513-CCA32A7D7E41

Windows Server 2003 with SP1/SP2 for Itanium-based systems and Internet Explorer 6:
http://www.microsoft.com/downloads/de...=309A8F10-C7EA-4961-A969-092B0C4D7BBC

Windows XP SP2 and Internet Explorer 7:
http://www.microsoft.com/downloads/de...=4CA0AC93-BF51-40FE-A1BA-CB3E0A36D8B5

Windows XP Professional x64 Edition (optionally with SP2) and Internet Explorer 7:
http://www.microsoft.com/downloads/de...=DBD284D0-2664-42A4-AD16-A0535244C81C

Windows Server 2003 SP1/SP2 and Internet Explorer 7:
http://www.microsoft.com/downloads/de...=0A31C451-32F4-4551-AE45-D600F8B3B11B

Windows Server 2003 x64 Edition (optionally with SP2) and Internet Explorer 7:
http://www.microsoft.com/downloads/de...=C1915633-D181-4CA1-A4F0-7CA0F865AA72

Windows Server 2003 with SP1/SP2 for Itanium-based systems and Internet Explorer 7:
http://www.microsoft.com/downloads/de...=093A2250-3BE3-494F-80E0-89CA7217030F

Windows Vista and Internet Explorer 7:
http://www.microsoft.com/downloads/de...=86392E8D-098C-427F-A233-699CDB9375AE

Windows Vista x64 Edition and Internet Explorer 7:
http://www.microsoft.com/downloads/de...=62490E6D-0A21-4A15-90BD-63CA8F8886B6

Rapporteret af / Kredit:
Producenten krediterer Pierre Geyer, next.motion OHG.

Original Advisory:
MS07-057 (KB939653):
http://www.microsoft.com/technet/security/Bulletin/MS07-057.mspx



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

134 Relaterede Secunia Advisories, displaying 10

1. Internet Explorer flere sårbarheder
2. Microsoft "Web Proxy Auto-Discovery" feature sikkerhedsproblem
3. Internet Explorer "OnKeyDown" fokus-svaghed
4. Microsoft Internet Explorer afsløring af FTP login-oplysninger
5. Microsoft Internet Explorer flere sårbarheder
6. Microsoft Windows Vector Markup Language buffer overflow
7. Internet Explorer "document.open()" adressebar-spoofing
8. Microsoft Internet Explorer 7 HTTP Basic Authentication IDN-spoofing
9. Internet Explorer flere sårbarheder
10. Internet Explorer side-loading race condition og URL-spoofing

Vis alle relaterede advisories


Send Feedback to Secunia

Hvis du har ny information angående dette Secunia advisory eller et produkt i vores database, så send det venligst til os. Du kan sende det til os enten ved at bruge vores web formular eller ved at sende det til vuln@secunia.com.

Ideer, foreslag og andet feedback er også meget velkommen.








Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Do you think it's important to read Setup/User Guides for applications for use within your network?


See Results   


Most Popular Advisories

1.
Microsoft Windows DNS Spoofing Vulnerabilities
2.
Microsoft Windows Explorer Saved Search Vulnerability
3.
Microsoft SQL Server and MSDE Multiple Vulnerabilities
4.
ArticleBeach Script "page" File Inclusion Vulnerability
5.
Microsoft Access Snapshot Viewer ActiveX Control Vulnerability
6.
Microsoft Outlook Web Access Script Insertion Vulnerabilities
7.
Joomla Unauthorized Access Vulnerabilities
8.
Facebook Photo Uploader ActiveX Control Property Handling Buffer Overflow
9.
Poppler "pageWidgets" Uninitialized Memory Access
10.
Neutrino Atomic Edition Security Bypass Vulnerability





Vulnerability Management - Terms & Conditions - Copyright 2002-2008 Secunia - Compliance - Contact Secunia