QtWeb Browser Address Bar URI Spoofing Vulnerability

Bugtraq ID:	49917
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 03 2011 12:00AM
Updated:	Oct 03 2011 12:00AM
Credit:	Lostmon
Vulnerable:	QtWeb QtWeb 3.7.3 (buils 087) QtWeb QtWeb 3.7.2
Not Vulnerable:

QtWeb Browser Address Bar URI Spoofing Vulnerability

QtWeb Browser is affected by a URI-spoofing vulnerability.

An attacker may leverage this issue by inserting arbitrary content to spoof a URI presented to an unsuspecting user. This may lead to a false sense of trust because the victim may be presented with a blank URI while interacting with the attacker's malicious site.

QtWeb Browser 3.7.2 and 3.7.3 (build 087) are vulnerable; other versions may also be affected.

QtWeb Browser Address Bar URI Spoofing Vulnerability

To exploit this issue, an attacker must entice an unsuspecting user to view a specially crafted Web page.

QtWeb Browser Address Bar URI Spoofing Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

QtWeb Browser Address Bar URI Spoofing Vulnerability

References:

• QTWeb Internet Browser URL weakness lets remote attackers to do Spoof or phishin (Lostmon)
  
• Vendor Homepage (QtWeb)