Microsoft's updated web browser has an old vulnerability that could let online criminals capture sensitive information such as passwords, a Danish security company reported on Monday.
"A vulnerability has been discovered in Internet Explorer 7, which can be exploited by malicious people to spoof the content of websites," Secunia said in an advisory posted to its website on Monday.
"The problem is that a website can inject content into another site's window if the target name of the window is known," the advisory states.
The flaw is virtually identical to one found in Internet Explorer 6 almost two years ago.
Microsoft could not immediately be reached for comment.
The so-called window injection vulnerability could let a specially designed website insert content into a pop-up window opened on a trusted site such as a bank.
The spoofed pop-up window could be used to trick people into revealing sensitive information, thinking that they are dealing with a legitimate site.
"Do not browse untrusted sites while browsing trusted sites," Secunia advises.
The company has constructed a test, available on its website, to help people assess whether their web browser is susceptible to the phishing vulnerability.
Secunia rated the problem as "moderately critical," its third-highest rating on a five-point scale.
Last week, Secunia reported a different IE7 vulnerability could allow a scam website to open a pop-up browser window that contains a faked internet address, exposing the browser's users to potential phishing attempts.
Related
Internal Links
External Links
- Secunia advisory on IE7 window injection vunerability
- Vulnerability test page
- Advisory for IE6 in 2004
(Note: CBC does not endorse and is not responsible for the content of external sites - links will open in new window)
More Technology & Science Headlines »
- Cassini probe snaps Earth through Saturn's rings
- An image that reveals new details of the planet Saturn is also the second photo of Earth ever taken from the outer reaches of the solar system.
- Tracking Mercury's day in the sun
- On Wednesday, the planet Mercury will make a rare trip in front of the sun for the first time since 2003 — it's not expected to happen again until 2016.
- 2005 set record for atmospheric greenhouse gas: UN
- Heat-trapping greenhouse gases in the atmosphere reached a record high in 2005 and are still increasing, the UN weather agency said Friday.
- New process turns soy oil, glucose into hydrogen
- Researchers say they have developed a new and faster method for producing hydrogen from oil and sugar.
- Brain link to computers can slow neurological disease, study suggests
- People with degenerative neurological diseases that cause paralysis may slow the progress of their illness by using computers to communicate before the affliction sets in deeply, research suggests.
