CTH

Select a Forum: -------------------- Operating Systems: -------------------- Windows 95 Windows 98 Windows ME Windows XP Windows NT, 2000, 2003 Windows Vista Linux Macintosh -------------------- Hardware: -------------------- Hardware Networking -------------------- Software: -------------------- Applications Gaming Internet / Browsers Cyber Safety Webdesign & Graphics -------------------- General: -------------------- Comments & Suggestions The Anything Else Forum Open Discussion --------------------

 to top

Latest News | News Archive |

Posted by: Tweaker
Date added: 00:27 Friday, 24th June 2005 GMT
Source: C/NET News

Security company Secunia says that most popular browsers are vulnerable to a malicious JavaScript pop-up that could trick people into giving away passwords or other personal information. The flaw would allow a phishing attack in which a malicious JavaScript pop-up window appeared in front of a trusted Web site, Secunia said in an alert published Tuesday. This could trick a surfer into revealing data such as a password. "The problem is that JavaScript dialog boxes do not display or include their origin, which allows a new window to open--for example, a prompt dialog box--which appears to be from a trusted site," said Secunia's advisory. According to Secunia, the latest versions of Internet Explorer, Internet Explorer for Mac, Safari, iCab, Mozilla, Mozilla Firefox and Camino are all vulnerable. Opera 7 and 8 are affected, but not 8.01, according to Opera. To take advantage of the flaw, a cybercriminal would have to direct a Web user from a malicious site to a genuine, trusted site such as an online bank, in a new browser window. The malicious site would then open a JavaScript dialog box in front of the trusted Web site, and a user might then be fooled into sending personal information back to the malicious site. Microsoft has said it is investigating Secunia's claims. It encouraged surfers not to trust pop-up windows that don't include an address bar or a lock icon that verifies that it came from a certified source.

  Tools: Post a comment | Link to this news item | Send to a friend | Submit News

 

Error: You are not logged in.

In order to leave comments to news articles you must be a Cyber Tech Help Member.

Registration is completely free!    Register to become a member

Along with access to leave comments to news articles you will be able to ask any computing questions you might have on the Cyber Tech Help Forums.