Browser injection ALERT ( I.E. - FIREFOX - OPERA - ETC )
 

This was posted the other day ,but most people were not aware it affected lots of browsers..

- Internet Explorer
- Mozilla / Firefox / Camino
- Opera
- Konqueror
- Safari
- Netscape
- iCab
- OmniWeb
- Internet Explorer for Mac
Microsoft Internet Explorer is reported prone to a vulnerability that may allow a Web site to hijack the contents of a trusted window. This issue may allow a remote attacker to carry out phishing style attacks.

This issue arises as a user visits a malicious site and follows a link to a trusted site. Once the link to the trusted site is followed, the victim must open a pop up window from the trusted site that can be influenced by the attacker's site.

If successful, the contents of the target site's window can be spoofed resulting in phishing style attacks.

http://www.earthunplugged.org/gfy/

If it doesn't work , tell us what you got and what settings.

Works in IE, not in Firefox.

doesn't work. firefox 0.9.2. No popup. I see
in the bottom status bar a JS init , but nothing happens upon click.

:thumbsup

Doesn't work in Mozilla for me. :glugglug

I'd test with IE, but I wouldn't ever surf GFY with
IE. Not after the, at least 1, iframe using advertiser this year. Using IE is like barebacking in Brazil.

Aha theres a slight tweak for it to work in all browsers

Maybe I'm missing something but neither work for me - no windows open

What browser ?

if all else fails try this one instead..

http://secunia.com/multiple_browsers...bility_t est/

Smokey, what's supposed to happen?

I clicked your link and then I clicked the GFY link on it. It opened in a new window and looks like the login to the GFY admin section. It reads "You have been granted admin status". Is this good or bad?

I'm using IE.

IE 6.0
Firefox 1.0 (I think)

nothing's happening with firefox 1.0 here...

you sir are the weakest link. goodbye.

Holy fuck that is wicked...

http://secunia.com/multiple_browsers...bility_t est/ worked, using Firefox on Linux.


Edit: and the URL won't post for some reason.

:eek7

penis envy:1orglaugh

http://secunia.com/multiple_browsers...bility_t est/

gfy breaks the url up with a line br

try this

http://tinyurl.com/4zbxd