Slim Browser Dialog Box Origin Spoofing Vulnerability

Bugtraq ID:	14038
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 22 2005 12:00AM
Updated:	Jun 22 2005 12:00AM
Credit:	Jakob Balle of Secunia Research is credited with the discovery of this issue. Juha-Matti Laurio <[email protected]> discovered that this issue existed in the Slim Browser.
Vulnerable:	FlashPeak Slim Browser 4.5 007 FlashPeak Slim Browser 4.01.003 FlashPeak Slim Browser 4.01 FlashPeak Slim Browser 4
Not Vulnerable:

Slim Browser Dialog Box Origin Spoofing Vulnerability

Slim Browser is prone to a dialog box origin spoofing vulnerability.

An attacker may exploit this vulnerability to spoof an interface of a trusted web site. This issue may allow a remote attacker to carry out phishing style attacks.

Slim Browser Dialog Box Origin Spoofing Vulnerability

An exploit is not required.

A proof of concept is available from the following location:

http://secunia.com/multiple_browsers_dialog_origin_vulnerability_test/

Slim Browser Dialog Box Origin Spoofing Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Slim Browser Dialog Box Origin Spoofing Vulnerability

References:

• Slim Browser Homepage (FlashPeak)