IoT
News
News
2/7/2005
03:15 PM
50%
50%
RELATED EVENTS
Automation, Speed & Quality: The Keys to Your Continuous Delivery Journey
Jun 15, 2016
Join InformationWeek and a team of industry experts on June 15 for a unique virtual event where yo ...Read More>>

All Browsers But IE At Risk From New Spoofing Scheme

A newly uncovered vulnerability in most browsers can allow hackers to spoof the URL displayed in the address bar and the SSL certificate.

A newly uncovered vulnerability in most browsers can allow hackers to spoof the URL displayed in the address bar and the SSL certificate, a security firm warned Monday. The one exception? Microsoft's Internet Explorer.

Danish security company Secunia posted an alert describing the vulnerability--which affects Mozilla, Firefox, Safari, Opera, and Konqueror--as a "moderately critical" problem.

The vulnerability impacts every browser that uses the open-source Gecko browser kernel--nearly all except IE--because of a flaw in handling International Domain Names (IDN). Hackers can register domain names with certain international characters that resemble other commonly used characters, said Secunia, to spoof the address and trick the user into thinking they're at a legitimate site and/or it's secured by SSL.

Such spoofing vulnerabilities are typically exploited by phishers who try to dupe users into divulging financial information at bogus Web sites that resemble real-life banking, credit card, or retail sites.

The vulnerability has been confirmed in the latest version of Firefox, v. 1.0, as well as in Mozilla 1.7.5, Opera 7.54u1, Opera 7.54u2, Safari 1.2.4, Konqueror 3.2.2, and Netscape 7.2. Other editions of these browsers, however, may also be at risk, said Secunia, which posted an online test on its Web site.

Currently, none of the vendors have provided fixes for the flaw.

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Register for InformationWeek Newsletters
White Papers
Current Issue
2016 InformationWeek Elite 100
Our 28th annual ranking of the leading US users of business technology.
Video
Slideshows
Twitter Feed
InformationWeek Radio
Sponsored Live Streaming Video
Everything You've Been Told About Mobility Is Wrong
Attend this video symposium with Sean Wisdom, Global Director of Mobility Solutions, and learn about how you can harness powerful new products to mobilize your business potential.