ICab Web Browser Dialog Box Origin Spoofing Vulnerability
BID:14010
Info
ICab Web Browser Dialog Box Origin Spoofing Vulnerability
| Bugtraq ID: | 14010 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 21 2005 12:00AM |
| Updated: | Jun 21 2005 12:00AM |
| Credit: | Jakob Balle of Secunia Research is credited with the discovery of this issue. |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
ICab Web Browser Dialog Box Origin Spoofing Vulnerability
ICab Web Browser is prone to a dialog box origin spoofing vulnerability.
An attacker may exploit this vulnerability to spoof an interface of a trusted web site. This issue may allow a remote attacker to carry out phishing style attacks.
ICab Web Browser is prone to a dialog box origin spoofing vulnerability.
An attacker may exploit this vulnerability to spoof an interface of a trusted web site. This issue may allow a remote attacker to carry out phishing style attacks.
Exploit / POC
ICab Web Browser Dialog Box Origin Spoofing Vulnerability
An exploit is not required.
A proof of concept is available from the following location:
http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/
An exploit is not required.
A proof of concept is available from the following location:
http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/
Solution / Fix
ICab Web Browser Dialog Box Origin Spoofing Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.