title: IE recent phishing vulnerability
link: http://jj.isgeek.net/2006/04/ie-recent-phishing-vulnerability/
author: Jj
description: 
post_id: 147
date: 2006/04/07 00:12:37
created_gmt: 2006/04/07 05:12:37
comment_status: open
slug: ie-recent-phishing-vulnerability

Today I read about the [recent phishing vulnerability in Internet Explorer](http://secunia.com/Internet_Explorer_Address_Bar_Spoofing_Vulnerability_Test/ ), In the Secunia page they had a test page, so I gave it a shot from work.

![Internet Explorar is vulnerable](https://bm.isgeek.net/a4/54/c85014633e69b588b7de738e6e69b056f40858269a44727707d3d5772f96.png)

Of course, I also tried with [Firefox](http://www.getfirefox.com)

![Firefox is safe](https://bm.isgeek.net/d9/b4/9403286d872c775312e3e2cf21ea0c8cc6ea6824e254a7deef4388f53096.png)

The function `StartTest` is the one called to open the phished window:
    
    
    
    
    
    
    function openWin(url)
    
    
    
    
    {
    
    
    
    
     window.open(url, 'window');
    
    
    
    
    }
    
    
    
    
    
    
    
    
    
    function StartTest()
    
    
    
    
    {
    
    
    
    
     openWin('http://www.google.com/');
    
    
    
    
    
    
    
    
    
     setTimeout("openWin('/19521_swf/?" + Math.random() + "');", 300);
    
    
    
    
    
    
    
    
    
     setTimeout("openWin('/19521_swf_result/');", 2500);
    
    
    
    
    }
    
    
    
    
    

> The vulnerability is caused due to a race condition in the loading of web content and Macromedia Flash Format files (".swf") in browser windows. This can be exploited to spoof the address bar in a browser window showing web content from a malicious web site.

From the [Secuania website](http://secunia.com/advisories/19521/).