----------------------------------------------------------------------

Want a new job?
http://secunia.com/secunia_vacancies/

Secunia is looking for new researchers with a reversing background
and experience in writing exploit code:
http://secunia.com/hardcore_disassembler_and_reverse_engineer/
http://secunia.com/Disassembling_og_Reversing/

----------------------------------------------------------------------

TITLE:
Internet Explorer 7 navcancl.htm Cross-Site Scripting Vulnerability

SECUNIA ADVISORY ID:
SA24535

VERIFY ADVISORY:
http://secunia.com/advisories/24535/

CRITICAL:
Less critical

IMPACT:
Cross Site Scripting, Spoofing

WHERE:
>From remote

SOFTWARE:
Microsoft Internet Explorer 7.x
http://secunia.com/product/12366/

DESCRIPTION:
Aviv Raff has discovered a vulnerability in Internet Explorer 7,
which can be exploited by malicious people to conduct phishing
attacks.

An input validation error exists in the local resource page
"navcancl.htm" when generating the "Refresh the page" link. This can
be exploited to inject arbitrary script code to e.g. spoof the
contents of an arbitrary site when the user clicks on the "Refresh
the page" link.

Secunia has constructed a test, which can be used to check if your
browser is affected by this issue:
http://secunia.com/Internet_Explorer_7_navcancl.htm_Cross-Site_Scripting_Vulnerability/

The vulnerability is confirmed in Internet Explorer 7 on a fully
patched Windows XP SP2 system. Other versions may also be affected.

SOLUTION:
Do not follow links from untrusted sources.

Do not click the "Refresh the page" link when the "Navigation
Canceled" page is displayed.

PROVIDED AND/OR DISCOVERED BY:
Aviv Raff

ORIGINAL ADVISORY:
http://aviv.raffon.net/2007/03/14/PhishingUsingIE7LocalResourceVulnerability.aspx

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------