HTTP: Multiple Web Browsers Window Injection

This signature detects attempts to exploit a known vulnerability against multiple web browsers. The issue arises when victim visits a malicious site via their browser and follows a link to a trusted site. Once the link to the trusted site is followed, the victim must open a popup window from the trusted site that can be influenced by the attacker's site. A successful exploit may allow a remote attacker to carry out phishing attacks.

Extended Description

Microsoft Internet Explorer is reported prone to a vulnerability that may allow a website to hijack the contents of a trusted window. This issue may allow a remote attacker to carry out phishing attacks. This issue arises as a user visits a malicious site and follows a link to a trusted site. Once the link to the trusted site is followed, the victim must open a popup window from the trusted site that can be influenced by the attacker's site. If the attack is successful, the contents of the target site's window can be spoofed, resulting in phishing attacks.

Affected Products

Microsoft internet_explorer

References

BugTraq: 11855

CVE: CVE-2004-1155

Short Name

HTTP:BROWSER-WINDOW-INJECTION

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Multiple Web Browsers Window Injection

Extended Description

Affected Products

References

Found a potential security threat?