RE: Internet Explorer URL parsing vulnerability
Can any workaround be used at proxy level?
I.e. can malicious URLs be blocked using Squid?
Thanks in advance
Domenico Viggiani
> -----Original Message-----
> From: bugtraq@xxxxxxxxxxxxxxxxx [mailto:bugtraq@xxxxxxxxxxxxxxxxx]
> Sent: Tuesday, December 09, 2003 3:44 PM
> Subject: Internet Explorer URL parsing vulnerability
>
> Internet Explorer URL parsing vulnerability
> Vendor Notified 09 December, 2003
>
> # Vulnerability ##########
> There is a flaw in the way that Internet Explorer displays
> URLs in the address bar.
>
> By opening a specially crafted URL an attacker can open a
> page that appears to be from a different domain from the
> current location.