Browser injection ALERT ( I.E. - FIREFOX - OPERA - ETC )

[SmokeyTheBear]

This was posted the other day ,but most people were not aware it affected lots of browsers..

- Internet Explorer
- Mozilla / Firefox / Camino
- Opera
- Konqueror
- Safari
- Netscape
- iCab
- OmniWeb
- Internet Explorer for Mac
Microsoft Internet Explorer is reported prone to a vulnerability that may allow a Web site to hijack the contents of a trusted window. This issue may allow a remote attacker to carry out phishing style attacks.

This issue arises as a user visits a malicious site and follows a link to a trusted site. Once the link to the trusted site is followed, the victim must open a pop up window from the trusted site that can be influenced by the attacker's site.

If successful, the contents of the target site's window can be spoofed resulting in phishing style attacks.

http://www.earthunplugged.org/gfy/

If it doesn't work , tell us what you got and what settings.

[Libertine]

Works in IE, not in Firefox.

[toddler]

doesn't work. firefox 0.9.2. No popup. I see
in the bottom status bar a JS init , but nothing happens upon click.

[sucker]

Originally posted by punkworld
Works in IE, not in Firefox.

[Pornwolf]

Doesn't work in Mozilla for me.

[toddler]

I'd test with IE, but I wouldn't ever surf GFY with
IE. Not after the, at least 1, iframe using advertiser this year. Using IE is like barebacking in Brazil.

[SmokeyTheBear]

Aha theres a slight tweak for it to work in all browsers

[Trixxxia]

Maybe I'm missing something but neither work for me - no windows open

[SmokeyTheBear]

Originally posted by TopBucksTrixxxia
Maybe I'm missing something but neither work for me - no windows open

What browser ?

if all else fails try this one instead..

http://secunia.com/multiple_browsers...rability_test/

[Drake]

Smokey, what's supposed to happen?

I clicked your link and then I clicked the GFY link on it. It opened in a new window and looks like the login to the GFY admin section. It reads "You have been granted admin status". Is this good or bad?

I'm using IE.

[Trixxxia]

Originally posted by SmokeyTheBear
What browser ?

if all else fails try this one instead..

http://secunia.com/multiple_browsers...rability_test/

IE 6.0
Firefox 1.0 (I think)

[SilverTab]

nothing's happening with firefox 1.0 here...

[fris]

you sir are the weakest link. goodbye.

[fuzebox]

Holy fuck that is wicked...

http://secunia.com/multiple_browsers...rability_test/ worked, using Firefox on Linux.


Edit: and the URL won't post for some reason.

[fuzebox]

Originally posted by fris
you sir are the weakest link. goodbye.

[SmokeyTheBear]

Originally posted by fuzebox

penis envy

[SmokeyTheBear]

http://secunia.com/multiple_browsers...rability_test/

gfy breaks the url up with a line br

try this

http://tinyurl.com/4zbxd