stargeek
PHP news website logo.
home    PHP scripts    articles    seo tools    links    search    contact    shop    realtors


New IE Exploit Spoofs Web SECURE Web Sites







New IE Exploit Spoofs Web SECURE Web
Sites

New IE Exploit Spoofs Web SECURE Web
Sites
12/22/2004 01:52 AM

This is without a doubt the most serious flaw found in Internet Explorer to date. Up to now, there was only a spoof vulnerability for regular web sites, but this one strikes at the very heart of online e-commerce, since it allows someone to spoof an HTTPS SECURE SSL site. This vulnerability applies only to IE and ONLY to systems with SP—2 installed. It was not covered in the last released patch a week or…

Direct and Related Links for 'New IE Exploit Spoofs Web SECURE Web Sites'




This is a GrokNews Entry: (what is grok?)





Similar Items

New IE Exploit Spoofs Web SECURE Web Sites

Grok Headline matches for New IE Exploit Spoofs Web SECURE Web Sites

New IE Exploit Spoofs Web Sites


New IE Exploit Spoofs Web Sites 12/19/2004 03:02 PM
Updated: Security researchers have uncovered a spoofing flaw in Internet Explorer that could allow a scammer to display a fake Web site with all of the attributes of a genuine, secure site.

Scam sites start spoofing secure sites


Scam sites start spoofing secure sites 12/12/2003 10:26 AM
Personal Computer World Dec 12 2003 9:16AM ET

Social networking sites are not very
secure


Social networking sites are not very
secure
01/04/2004 06:13 AM
lack of security social network sites have .. virtual identity theft .. SecurityFocus .. Cet article

securityfocus.com/news/7739
track this site | 5 links


[Exploit]: Microsoft FPSE fp30reg.dll
Overflow Remote Exploit (MS03-051)


[Exploit]: Microsoft FPSE fp30reg.dll
Overflow Remote Exploit (MS03-051)
11/15/2003 02:20 PM
Adik (Nov 14 2003)

[Exploit]: DameWare Mini Remote Control
Server Overflow Exploit


[Exploit]: DameWare Mini Remote Control
Server Overflow Exploit
12/19/2003 06:25 PM
Adik (Dec 19 2003)

Spam, spim, spoofs…will it ever end?


Spam, spim, spoofs…will it ever end? 06/15/2004 09:51 AM

New worm spoofs your AIM buddies


New worm spoofs your AIM buddies 06/06/2005 12:06 AM

Trailer on the internet spoofs 'Star
Wars'


Trailer on the internet spoofs 'Star
Wars'
04/12/2005 10:55 AM
Nynewsday.com - Tue Apr 12, 10:54 am GMT

Exploit: AIM Exploit (Ignore Previous
Post)


Exploit: AIM Exploit (Ignore Previous
Post)
09/02/2004 12:07 PM
John Bissell (Sep 01 2004)

Janet spoofs Super Bowl flash on 'SNL'


Janet spoofs Super Bowl flash on 'SNL' 04/11/2004 01:09 PM

Janet Spoofs Super Bowl Flash on 'SNL'
(AP)


Janet Spoofs Super Bowl Flash on 'SNL'
(AP)
04/11/2004 08:09 AM
AP - It was inevitable: Janet Jackson spoofing her infamous wardrobe malfunction by flashing a heavily pixillated breast on "Saturday Night Live." The one surprise was the context. Jackson portrayed national security adviser Condoleezza Rice opening her blouse at the Sept. 11 commission hearings, in an opening skit on the comedy show.

Fuse Marketing Campaign Spoofs Apple
IPod Ads (Reuters)


Fuse Marketing Campaign Spoofs Apple
IPod Ads (Reuters)
07/19/2004 02:39 AM
Reuters - Seeking to expand its growing franchise among the hip youth market, the Fuse 24-hour music television network on Monday launched a new ad campaign that plays on the wildly popular iPod "silhouette" billboards.

Even More Ways To Exploit The URL
Handler Exploit


Even More Ways To Exploit The URL
Handler Exploit
05/21/2004 11:34 AM

Broadbandaction Inc to Deliver Echoworx
Secure Email™ Secure Messaging
Solution Designed to Meet the Nee


Broadbandaction Inc to Deliver Echoworx
Secure Email™ Secure Messaging
Solution Designed to Meet the Nee
04/05/2005 09:12 AM
Computer Security News Apr 5 2005 1:18PM GMT

Max Secure Spyware Detector - Secure
your Corporate Network from Spies


Max Secure Spyware Detector - Secure
your Corporate Network from Spies
04/18/2005 03:55 AM
Max Secure Software, developer and global leader in information security products varying from a broad range of security software solutions, and services designed to help individuals, small and mid-sized businesses, and large enterprises security announces release of new product, Spyware Detector Enterprise Edition. [PRWEB Apr 18, 2005]

RIAA's noise-spoofs turned into
noise-rock


RIAA's noise-spoofs turned into
noise-rock
04/26/2004 10:07 AM
Claire Chanel, the person behind the Jay-Z Construction Set, has decided to net.judo-ify the RIAA's spoof tracks, random noise disguised as top-40 singles which it promulgates on the P2P netowrks.
As a follow-up to our last project, the Jay-Z Construction Set, Scary Sherman and I decided to take a fair & balanced route by highlighting one of the positive moves made recently by music industry leaders.

The RIAA-Mix Vol.1 is a compilation of the hottest underground remixes of top40 hit tracks produced by the upcoming talent at Overpeer. These homages to 20th century noise artists and avant composers pull a frightening bait and switch on listeners veering wildly from recognizable pop hooks to jarring digital distortion.

Available at riaamix.com as downloadable mp3s, streaming flash audio, or on a compact disc, we're hoping our compilation can help support the arrival of challenging new music to mainstream exposure.

Link

And Now... Another URI Exploit?


And Now... Another URI Exploit? 05/21/2004 11:21 PM

802.11b DoS exploit


802.11b DoS exploit 03/13/2003 10:22 AM
Mark Osborne (Mar 11 2003)

Serv-U exploit


Serv-U exploit 01/01/2005 04:54 AM
Berend-Jan Wever (Jan 30 2004)

utilman.exe exploit


utilman.exe exploit 07/17/2004 04:09 PM
Iván Rodriguez Almuiña (Jul 17 2004)

A new security exploit?


A new security exploit? 12/12/2003 08:08 AM

Don Park: "It's like discovering that everything you designed was built on a gigantic turtle that just woke up."

As Don recommends, I did a View Source. This is what the URL looks like. With a quick glance it looks like it's from Microsoft, but you're actually viewing a page at zapthedingbat.com. This isn't entirely new. I'm not sure what the %01 is about. I guess it's a problem if it's the action attribute of a form element, where you can't see the URL. Takeaway: look in the Address part of the browser window when you're typing into a form and if it's the wrong place, hit the Back button and resume your life.

"curly"


phpbb 2.0.13 Exploit (bug)


phpbb 2.0.13 Exploit (bug) 03/25/2005 02:56 PM
tOnk3r (Mar 25 2005)

EXPLOIT libpng


EXPLOIT libpng 08/11/2004 01:59 PM
infamous41md_at_hotpop.com (Aug 09 2004)

Example of JPG Exploit & Shellcode


Example of JPG Exploit & Shellcode 09/23/2004 07:34 PM
javier falbo (Sep 22 2004)

PHP-Post Exploit


PHP-Post Exploit 03/19/2005 03:10 AM
Terencentanio Enache (Mar 18 2005)

First Ever GSM Cellphone Exploit


First Ever GSM Cellphone Exploit 04/21/2004 08:55 AM

Centra 7 XSS Exploit


Centra 7 XSS Exploit 04/12/2005 08:24 PM
Posted by Clorox, Apr 12 2005

Are We Just an IE Exploit Blog Now?


Are We Just an IE Exploit Blog Now? 07/13/2004 05:16 PM

Faced with yet another round of IE exploits, people are starting to move to other browsers. For the first time ever, IE has lost market share, down 1% in the past month.

"It's the first time that we've seen a sustained trend downward for them," said Geoff Johnston, an analyst with WebSideStory. "We have a very steady trend. It's been about a month, and every day we have a steady incremental change."

Internet Explorer has held more than 95 percent of the browser market since June 2002, and until June had remained steady with about 95.7 percent of the browser market, according to WebSideStory's measurements. Over the last month, however, its market share has slowly dropped from 95.73 percent on June 4 to 94.73 percent on July 6.

CNet wonders if this is truly a trend. I think that once people give Mozilla SpaceYak a try, they'll be unlikely to switch back.

Via ArsTechnic a.

Click here to comment on this entry


IE Spoof Exploit


IE Spoof Exploit 12/29/2003 11:48 PM

New, sneaky, evil PayPal spoof: Here's a good example of an email scam made possible by the IE URL spoofing hole that remains unpatched.

Click here to comment on this entry


Doom 3 Exploit


Doom 3 Exploit 08/06/2004 04:42 PM

IIS, IE exploit unleashed


IIS, IE exploit unleashed 06/25/2004 12:11 PM
A possible "zero-day" IIS exploit combined with a vulnerability in IE6 is resulting in PCs which visit compromised sites being infected with malware. The code consists of JavaScript appended to image files downloaded from compromised IIS servers.

Another Hashing Exploit


Another Hashing Exploit 06/17/2005 03:45 PM

Trust no one:

Cryptographers have found a way to snip a digital signature from one document and attach it to a fraudulent document without invalidating the signature and giving the fraud away.

The development means that attackers could potentially forge legal documents, load certified software with bogus code, or turn a digitally-signed letter of recommendation into one that authorises access to private information.

"It's not the end of the world yet, but we need to stop using MD-5 and SHA-1 before it is," notes Dan Kaminsky, an independent security consultant based in Seattle, Washington, US.

Via New Scientist.


Another Zero-Day IE Scripting Exploit


Another Zero-Day IE Scripting Exploit 06/09/2004 12:43 PM

...::: hotforum.nl XSS exploit :::...


...::: hotforum.nl XSS exploit :::... 03/14/2005 04:37 PM
Rebyte Security (Mar 12 2005)

eZ remote exploit


eZ remote exploit 12/17/2003 02:31 PM
Iván Rodriguez Almuiña (Dec 17 2003)

Gmail Exploit, Say it Ain't So!


Gmail Exploit, Say it Ain't So! 01/07/2005 02:06 AM
What many have titled to be the king of Web based E-mail has a security problem. This one seems to be a security flaw when it comes to special characters in the E-mail address….

Direct and Related Links for 'Gmail Exploit, Say it Ain’t So!'


Microsoft Jet (msjet40.dll) Exploit


Microsoft Jet (msjet40.dll) Exploit 04/11/2005 08:25 PM
Posted by Stuart Pearson, Apr 11 2005

surfboard1.1.6 local exploit.


surfboard1.1.6 local exploit. 05/12/2004 03:39 PM
Anonymous (May 11 2004)

NEW GDI+ JPEG Remote Exploit


NEW GDI+ JPEG Remote Exploit 09/25/2004 02:13 AM
John Bissell (Sep 22 2004)
Grok Description matches for New IE Exploit Spoofs Web SECURE Web Sites
GrokA matches for New IE Exploit Spoofs Web SECURE Web Sites

New IE Exploit Spoofs Web SECURE Web Sites

The following phrases have been identified by the grok system as matching this entry:

















Also check out:


Grok

Ipod Porn on the
Rise

Brief Abstract of
Wikipedia's
Mesothelioma Cancer
page

Get first aid
instructions in your
cell phone

IE is crap
JSPWiki gains
podcasting support

Spyware: Define Your
Terms!

eBay snaps up
Rent.com for $415m

A Fatal Blow to
Shrinkwrap Licensing

Spinal Cord Injury
Hope - Will Bush
Kibosh it?

Electronic Arts Buys
a Piece of Ubisoft

Personal Submarine -
the Ultimate Geek
Gift?

A Fatal Blow to
Shrinkwrap
Licensing?

Do your devices have
the touch of the
bunny?

iMac G5: “Worth
Switch from
PCs”

Royale Theme for XP
Punch Card Cash Envy
Waxy for President!
Feels like home
Extending the Long
Tail

Bubble Dreams Come
True

Wishlist Art
URL Manager Pro 3.4
final released

GarageKey MIDI
Keyboard now
shipping

Aspyr offers icon
utility pack for Mac
OS X

HarmonyAudio
FireWire audio
interface announced

PC Mag: eMac is
worst desktop of the
year

iPod mini in short
supply in Canada

iPod manager,
Indiespace, Wheaton
on Inside Mac

Apple delays Xsan
software until 2005

Iomega intros new
hard drive lineup

ATI reports record
quarterly results

New Holiday ThemePAK
for iDVD 4 released

Adobe Illustrator CS
11.0.2 released

Business Card
Composer 3.0
announced

Apple to
'significantly
exceed' Q1 guidance

'iPod + iTunes Quick
Tips' eBook released

ShutterBug Web album
creation software
released

Apple sues three for
posting 'Tiger' on
the Web

Apple subpoenas Mac
sites over audio
device

GSM Overtakes CDMA
in Brazil, reports
GSA

Research And
Markets: Fixed-Line
Teledensities In The
South Pacific Island
Region Are Still
Comparatively Low,
With Large
Differences Between
Urban And Rural
Areas Where Coverage
Is Usually Poor

Research and
Markets: Players and
Investors in the
Prepaid Market: Pay
Attention to This
Analysis of the
Prepaid Sector
2005-2009

New Mobile Phone
Forum Featuring
Discussion Forums,
Brand Reviews, FAQs,
Service Providers
Reviews

New Cell Phones on
the Net

SamsungCordless'
Long Range Cordless
Phone Market Ramping
Up Output

Worlds Biggest
Snowball Fight

Mobile Multimedia
Messaging (MMS)
Revenues to reach
$42.5 billion
Worldwide in 2005,
but High User
Failure Rate Remains

Mining Giant Told It
Put Toxic Vapors
Into Indonesia's Air

Dodgers Sink the
Three-Way Trade for
Johnson

Transit Chief Says
Repairs Have
Priority Over
Expansion

Administration Gives
Mixed View on Drug
Imports

Fighting On Is the
Only Option,
Americans Say

Chief Is Ousted at
Fannie Mae Under
Pressure

Olympus E1 camera
review available

Christmas Gift Idea
what is grok?