JavaScript Flaw Affected Multiple Browsers
Filed in: Security — June 23rd, 2005
Secunia Research has discovered a vulnerability in various browsers, which can be exploited by malicious web sites to spoof dialog boxes.
The problem is that JavaScript dialog boxes do not display or include their origin, which allows a new window to open e.g. a prompt dialog box, which appears to be from a trusted site.
[ Read and test your browser ]
Solution: Do not browse untrusted web sites while browsing trusted sites.
For Opera users upgrade to version 8.01 which has been patched. Microsoft has no plan to distribute a fix [PCWorld.com]. Hopefully, Firefox 1.0.5(currently test build) will fix the bug too.
Updates: I tested Firefox 1.0.5 test build, it is affected by the Javascript flaw as well. 
Guess the developement team will patch it before the final release.
Comments Feed
TrackBack URL
June 23rd, 2005 at 10:12 am
When you mean dialogue boxes, do you mean those that when you hover and there’s an ad displayed..?
June 23rd, 2005 at 10:40 am
it is the dialog created from the javascript prompt() function.